last executing test programs: 2m17.401167336s ago: executing program 4 (id=255): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 2m15.333416073s ago: executing program 4 (id=267): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2m14.521161423s ago: executing program 4 (id=271): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x100, 0x0) ioctl$FITRIM(r0, 0xc4009420, &(0x7f0000000180)={0x5}) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB], 0x1, 0xd99, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) 2m13.938387982s ago: executing program 4 (id=273): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)=0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_delete(r2) 2m13.669485685s ago: executing program 4 (id=277): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m12.894028896s ago: executing program 4 (id=280): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$bsg(0xffffff9c, &(0x7f0000000000), 0x80800, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x219b, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2800) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000240)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pread64(r5, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) 1m57.779745248s ago: executing program 32 (id=280): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$bsg(0xffffff9c, &(0x7f0000000000), 0x80800, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x219b, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x2800) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000240)='smaps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pread64(r5, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) 7.030861449s ago: executing program 2 (id=959): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000c40)={{0x0, 0x989680}}, &(0x7f0000000080)) 6.16594059s ago: executing program 3 (id=961): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) 6.133483711s ago: executing program 2 (id=962): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/127, 0x7f}, {&(0x7f00000000c0)=""/19, 0x13}], 0x4}, 0x4}], 0x2, 0x60, 0x0) 5.761548046s ago: executing program 2 (id=964): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file2\x00', 0x2000000, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x5, 0x2e2, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x20060400) fdatasync(r0) 5.37333574s ago: executing program 2 (id=969): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x800}]}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 5.170182803s ago: executing program 2 (id=971): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x800, 0xfffffffe) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000300)=[{0x2, 0x2, 0x4, 0x9}, {0x3, 0x5, 0x6, 0x1}, {0x3, 0x3, 0xf, 0x2}, {0x5, 0x5, 0xd, 0x8}, {0x1, 0x5, 0xc, 0x2119307be8841de8}, {0x1, 0x4, 0x7, 0xb}, {0x2, 0x2, 0x3, 0x3}, {0x4, 0x1, 0xa, 0x9}, {0x2, 0x1, 0xf, 0xc}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800"], 0x7c}}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='afs_folio_dirty\x00', r5}, 0x18) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f0000000580)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000900)={{r7, 0x8, 0x3, 0xd, 0x0, 0x8, 0x200, 0x7ff, 0x80000000, 0x3, 0xf, 0xfff, 0xc, 0x81, 0x3}}) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) write$6lowpan_control(r6, &(0x7f00000002c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 4.817463208s ago: executing program 3 (id=973): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setresuid(0xee00, 0x0, 0x0) ioprio_set$uid(0x3, 0xee00, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005140)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/73, 0x49}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000340)=""/114, 0x72}], 0x5, &(0x7f0000000480)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000680), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000005200)=[{0x0}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/107, 0x6b}, {&(0x7f0000002e40)=""/205, 0xcd}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f00000006c0)}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/16, 0x10}, {&(0x7f0000004f80)=""/133, 0x85}], 0x9, &(0x7f00000050c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}], 0x3, 0x40000040, &(0x7f0000000580)={0x0, 0x3938700}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r4 = dup(0xffffffffffffffff) setsockopt$inet_opts(r4, 0x0, 0x22, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000002c000000180a05000000000000000000010000000900010073797a30000000000c000540000000000000000114000000020a01"], 0xc8}}, 0x4000450) 4.013717878s ago: executing program 1 (id=975): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400}) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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") lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) lsetxattr$system_posix_acl(0x0, &(0x7f0000000740)='system.posix_acl_default\x00', &(0x7f0000000a40)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x4}, {0x20, 0x3}}, 0x24, 0x2) llistxattr(&(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0) 3.91338901s ago: executing program 1 (id=976): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, 0x0) 3.729628102s ago: executing program 0 (id=977): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r0) 3.657551043s ago: executing program 1 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3.440149696s ago: executing program 0 (id=979): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e22, 0x0, @loopback, 0xb1600000}], 0x38) 3.357603197s ago: executing program 1 (id=980): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095000000000000001c3f7ad300340b693157a624a038ada876babb6e29fed7794d9842177472bbcff420263794c1e7acb2abc454773d4a70c83970293ee45f06000000b9a256e95c9568"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 3.287679798s ago: executing program 3 (id=981): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x800}]}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 3.198565909s ago: executing program 0 (id=982): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.952372692s ago: executing program 0 (id=983): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0}) 2.850657063s ago: executing program 2 (id=984): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_setup(0x468d, &(0x7f0000000300)={0x0, 0x9b92, 0x4, 0x41, 0x226}, &(0x7f0000000280), &(0x7f0000000380)) close(0xffffffffffffffff) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8010002b) 2.32996559s ago: executing program 3 (id=985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c800}, 0x0) 2.001140735s ago: executing program 5 (id=987): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.904706216s ago: executing program 5 (id=988): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cce5f340570b63d8bb2e0000000109021200010000000009"], 0x0) 1.837529626s ago: executing program 3 (id=989): socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0xd8f}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x39, 0x4, 0x1}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_emit_vhci(0x0, 0xf8) 985.466648ms ago: executing program 0 (id=990): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xff, 0x6}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 619.030732ms ago: executing program 0 (id=991): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x18, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 563.801663ms ago: executing program 1 (id=992): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x5, 0xed, 0x20b1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) 563.281043ms ago: executing program 5 (id=993): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xff, 0x6}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000280)={0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[], 0x18}}, 0x20000000) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 441.690094ms ago: executing program 5 (id=994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) 373.260475ms ago: executing program 5 (id=995): socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x1ffffffd, 0x0, 0x2, 0x1, 0x9, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 369.176846ms ago: executing program 3 (id=996): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x9) close_range(r1, r2, 0x0) 245.576307ms ago: executing program 5 (id=997): sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010326bd7000fedbdf250d0000008b062c0006"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0xfffffdfa) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vxcan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=998): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="0500130092848b000a00060008021100000100000600100080050000060012"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): ext4_enable_quotas:7054: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 160.704051][ T5521] EXT4-fs (loop1): mount failed [ 160.714917][ T5513] loop2: detected capacity change from 0 to 32768 [ 160.758069][ T5513] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.286 (5513) [ 160.842531][ T5513] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.937913][ T5513] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 161.035701][ T5513] BTRFS info (device loop2): allowing degraded mounts [ 161.045180][ T5515] loop3: detected capacity change from 0 to 32768 [ 161.059916][ T5513] BTRFS info (device loop2): setting nodatasum [ 161.066181][ T5513] BTRFS info (device loop2): disabling tree log [ 161.087511][ T5515] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.290 (5515) [ 161.139909][ T5513] BTRFS info (device loop2): using free space tree [ 161.199903][ T4498] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4498) [ 161.376864][ T5515] loop3: detected capacity change from 0 to 4096 [ 161.499916][ T5549] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.011071][ T5558] loop3: detected capacity change from 0 to 512 [ 162.036684][ T4258] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.133105][ T5558] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 162.149225][ T5558] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.331025][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 162.732749][ T4630] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 162.933915][ T4630] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.964196][ T4630] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 162.983100][ T4630] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.006518][ T4630] usb 3-1: config 0 descriptor?? [ 163.023889][ T4630] pwc: Askey VC010 type 2 USB webcam detected. [ 163.176252][ T4432] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.181682][ T5584] loop0: detected capacity change from 0 to 4096 [ 163.260343][ T5589] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.417875][ T5137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.428104][ T4630] pwc: recv_control_msg error -32 req 02 val 2b00 [ 163.438154][ T4630] pwc: recv_control_msg error -32 req 02 val 2700 [ 163.473189][ T5576] loop1: detected capacity change from 0 to 32768 [ 163.645584][ T5576] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.300 (5576) [ 163.668420][ T4630] pwc: recv_control_msg error -71 req 04 val 1000 [ 163.689649][ T4630] pwc: recv_control_msg error -71 req 04 val 1300 [ 163.740185][ T4630] pwc: recv_control_msg error -71 req 04 val 1400 [ 163.746917][ T5576] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 163.788943][ T4630] pwc: recv_control_msg error -71 req 02 val 2000 [ 163.796106][ T5576] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 163.825463][ T4630] pwc: recv_control_msg error -71 req 02 val 2100 [ 163.847343][ T4630] pwc: recv_control_msg error -71 req 04 val 1500 [ 163.854449][ T5576] BTRFS info (device loop1): using free space tree [ 163.879522][ T4630] pwc: recv_control_msg error -71 req 02 val 2500 [ 163.905171][ T4630] pwc: recv_control_msg error -71 req 02 val 2400 [ 163.927603][ T4630] pwc: recv_control_msg error -71 req 02 val 2600 [ 163.954223][ T4630] pwc: recv_control_msg error -71 req 02 val 2900 [ 163.976458][ T4630] pwc: recv_control_msg error -71 req 02 val 2800 [ 163.984301][ T5588] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 164.027826][ T4630] pwc: recv_control_msg error -71 req 04 val 1100 [ 164.076023][ T4630] pwc: recv_control_msg error -71 req 04 val 1200 [ 164.158922][ T4630] pwc: Registered as video103. [ 164.202766][ T4630] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 164.237855][ T5610] loop3: detected capacity change from 0 to 4096 [ 164.248197][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.252220][ T4630] usb 3-1: USB disconnect, device number 2 [ 164.460742][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.590094][ T5576] BTRFS info (device loop1): enabling ssd optimizations [ 164.643888][ T5614] loop2: detected capacity change from 0 to 512 [ 164.792987][ T5614] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.802933][ T27] audit: type=1804 audit(1746711973.880:21): pid=5576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.300" name="/newroot/59/file0/file1" dev="loop1" ino=260 res=1 errno=0 [ 164.827910][ T5614] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.850260][ T4626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.897992][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 165.141488][ T4249] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 165.490341][ T4303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.498499][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.498704][ T4303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.520932][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.581148][ T5631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.010304][ T4624] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 166.202655][ T4624] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 166.224685][ T4624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.234959][ T5643] loop0: detected capacity change from 0 to 4096 [ 166.255411][ T4624] usb 3-1: config 0 descriptor?? [ 166.283184][ T4624] pwc: Samsung MPC-C10 USB webcam detected. [ 166.335018][ T5649] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.485949][ T4624] pwc: send_video_command error -71 [ 166.492847][ T4624] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 166.514578][ T4624] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 166.559374][ T4624] usb 3-1: USB disconnect, device number 3 [ 166.648195][ T5653] loop3: detected capacity change from 0 to 512 [ 166.742539][ T5653] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 166.760354][ T5653] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.804472][ T5658] loop0: detected capacity change from 0 to 256 [ 166.846010][ T5658] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.858284][ T5658] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 166.872500][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 166.928969][ T5658] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x9eba79a2, utbl_chksum : 0xe619d30d) [ 166.973229][ T5647] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 167.068360][ T5658] exFAT-fs (loop0): hint_cluster is invalid (17) [ 167.135003][ T5658] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 167.157727][ T5658] exFAT-fs (loop0): Filesystem has been set read-only [ 167.798285][ T5667] loop2: detected capacity change from 0 to 32768 [ 167.867431][ T5667] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.324 (5667) [ 167.988004][ T5667] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 168.060064][ T5667] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 168.106025][ T5667] BTRFS info (device loop2): using free space tree [ 168.370349][ T5137] net_ratelimit: 33 callbacks suppressed [ 168.370366][ T5137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.519632][ T5667] BTRFS info (device loop2): enabling ssd optimizations [ 168.690449][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.698676][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.707866][ T4300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.841605][ T4258] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 169.556798][ T4628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.556933][ T5137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.730323][ T4303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.213894][ T5716] loop2: detected capacity change from 0 to 256 [ 170.297977][ T5716] FAT-fs (loop2): Directory bread(block 64) failed [ 170.330623][ T5716] FAT-fs (loop2): Directory bread(block 65) failed [ 170.348028][ T5716] FAT-fs (loop2): Directory bread(block 66) failed [ 170.386375][ T5716] FAT-fs (loop2): Directory bread(block 67) failed [ 170.404724][ T5716] FAT-fs (loop2): Directory bread(block 68) failed [ 170.426993][ T5716] FAT-fs (loop2): Directory bread(block 69) failed [ 170.449625][ T5716] FAT-fs (loop2): Directory bread(block 70) failed [ 170.460122][ T4628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.472873][ T5716] FAT-fs (loop2): Directory bread(block 71) failed [ 170.479639][ T5716] FAT-fs (loop2): Directory bread(block 72) failed [ 170.492047][ T5716] FAT-fs (loop2): Directory bread(block 73) failed [ 170.567583][ T5682] loop1: detected capacity change from 0 to 32768 [ 170.592724][ T5682] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.329 (5682) [ 170.638401][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.737336][ T5682] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.780248][ T5137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.816761][ T5682] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 170.836164][ T11] kworker/u4:1: attempt to access beyond end of device [ 170.836164][ T11] loop2: rw=1, sector=1224, nr_sectors = 404 limit=256 [ 170.897753][ T5682] BTRFS info (device loop1): allowing degraded mounts [ 170.949895][ T5682] BTRFS info (device loop1): setting nodatasum [ 170.991476][ T5682] BTRFS info (device loop1): disabling tree log [ 170.997806][ T5682] BTRFS info (device loop1): using free space tree [ 171.037213][ T5726] syz.2.340 sent an empty control message without MSG_MORE. [ 171.213769][ T5682] BTRFS error (device loop1): open_ctree failed: -12 [ 171.476089][ T4269] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4269) [ 172.749746][ T5745] loop2: detected capacity change from 0 to 32768 [ 172.818890][ T5745] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.342 (5745) [ 172.915820][ T5745] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 173.003737][ T5745] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 173.050150][ T5745] BTRFS info (device loop2): using free space tree [ 173.490310][ T4626] net_ratelimit: 5 callbacks suppressed [ 173.490328][ T4626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.605833][ T5745] BTRFS info (device loop2): enabling ssd optimizations [ 173.745102][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.890135][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.966845][ T4258] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 174.798248][ T5137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.920128][ T4626] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 174.977899][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.000498][ T4516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.036068][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.133031][ T4626] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 175.151068][ T5799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.163462][ T4626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.217865][ T4626] usb 4-1: config 0 descriptor?? [ 175.268577][ T4626] pwc: Samsung MPC-C10 USB webcam detected. [ 175.312300][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.330023][ T4259] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.339951][ T4259] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.348810][ T4259] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.359487][ T4259] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.372805][ T4259] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 175.380432][ T4259] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.418470][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.464969][ T4626] pwc: send_video_command error -71 [ 175.474492][ T4626] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 175.500302][ T4626] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 175.539319][ T4626] usb 4-1: USB disconnect, device number 5 [ 175.673873][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.767931][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.888296][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.119474][ T5814] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 176.138993][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.273028][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 176.320036][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 176.441017][ T5811] loop0: detected capacity change from 0 to 32768 [ 176.494308][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 176.504039][ T5811] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.599921][ T5811] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 176.689866][ T5811] BTRFS info (device loop0): allowing degraded mounts [ 176.696871][ T5811] BTRFS info (device loop0): setting nodatasum [ 176.735481][ T5811] BTRFS info (device loop0): disabling tree log [ 176.755334][ T5811] BTRFS info (device loop0): using free space tree [ 176.767899][ T5824] netlink: 20 bytes leftover after parsing attributes in process `syz.1.361'. [ 176.812725][ T5824] netlink: 20 bytes leftover after parsing attributes in process `syz.1.361'. [ 177.248355][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.288873][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.304443][ T5857] loop3: detected capacity change from 0 to 1024 [ 177.315241][ T5805] device bridge_slave_0 entered promiscuous mode [ 177.329569][ T5857] EXT4-fs: Ignoring removed bh option [ 177.340034][ T4629] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 177.410133][ T4259] Bluetooth: hci4: command 0x0409 tx timeout [ 177.417899][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.438435][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.451932][ T5857] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 177.517783][ T5805] device bridge_slave_1 entered promiscuous mode [ 177.539895][ T4629] usb 2-1: Using ep0 maxpacket: 16 [ 177.564164][ T4629] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 177.624404][ T4629] usb 2-1: config 0 has no interface number 0 [ 177.681095][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 177.681243][ T4629] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 177.723506][ T4629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.772545][ T4629] usb 2-1: Product: syz [ 177.776778][ T4629] usb 2-1: Manufacturer: syz [ 177.792793][ T4629] usb 2-1: SerialNumber: syz [ 177.814857][ T4254] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.826403][ T4629] usb 2-1: config 0 descriptor?? [ 177.859084][ T4629] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 178.275118][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.298685][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 178.337029][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 178.454471][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.654333][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 178.694641][ T4298] net_ratelimit: 13 callbacks suppressed [ 178.694660][ T4298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.756218][ T5805] team0: Port device team_slave_0 added [ 178.788059][ T5805] team0: Port device team_slave_1 added [ 179.063722][ T5895] loop2: detected capacity change from 0 to 2048 [ 179.081490][ T5895] UDF-fs: bad mount option "00000000000000000003  " or missing value [ 179.256825][ T4303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.304845][ T5883] loop0: detected capacity change from 0 to 32768 [ 179.312844][ T5883] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.369 (5883) [ 179.353038][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.370419][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.399091][ T5892] loop2: detected capacity change from 0 to 2048 [ 179.438331][ T5892] UDF-fs: bad mount option "s" or missing value [ 179.471680][ T4629] gspca_spca1528: reg_r err -71 [ 179.476621][ T4629] spca1528: probe of 2-1:0.1 failed with error -71 [ 179.489430][ T5883] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 179.489964][ T4259] Bluetooth: hci4: command 0x041b tx timeout [ 179.537507][ T5883] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 179.577264][ T4629] usb 2-1: USB disconnect, device number 11 [ 179.580008][ T5883] BTRFS info (device loop0): using free space tree [ 179.597415][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.769088][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.778412][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.906895][ T5883] BTRFS info (device loop0): enabling ssd optimizations [ 180.000009][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.032228][ T27] audit: type=1804 audit(1746711989.100:22): pid=5883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.369" name="/newroot/82/file0/file1" dev="loop0" ino=260 res=1 errno=0 [ 180.204327][ T5919] loop2: detected capacity change from 0 to 2048 [ 180.277572][ T4254] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 180.290715][ T4516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.336361][ T5919] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.023874][ T5805] device hsr_slave_0 entered promiscuous mode [ 181.082115][ T5805] device hsr_slave_1 entered promiscuous mode [ 181.091525][ T5805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.145318][ T5805] Cannot create hsr debugfs directory [ 181.331588][ T4303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.447194][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 181.466576][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 181.564294][ T5922] loop1: detected capacity change from 0 to 32768 [ 181.571066][ T4259] Bluetooth: hci4: command 0x040f tx timeout [ 181.577258][ T11] device hsr_slave_0 left promiscuous mode [ 181.599648][ T5922] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.378 (5922) [ 181.653750][ T11] device hsr_slave_1 left promiscuous mode [ 181.674818][ T5922] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.685543][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.696379][ T5922] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 181.725986][ T5922] BTRFS info (device loop1): allowing degraded mounts [ 181.726011][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.740652][ T4298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.752980][ T5922] BTRFS info (device loop1): setting nodatasum [ 181.776122][ T5922] BTRFS info (device loop1): disabling tree log [ 181.807690][ T5922] BTRFS info (device loop1): using free space tree [ 181.816153][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.828785][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.844265][ T11] device bridge_slave_1 left promiscuous mode [ 181.853441][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.868479][ T11] device bridge_slave_0 left promiscuous mode [ 181.877444][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.921603][ T11] device veth1_macvtap left promiscuous mode [ 181.928411][ T11] device veth0_macvtap left promiscuous mode [ 181.954976][ T11] device veth1_vlan left promiscuous mode [ 181.961570][ T11] device veth0_vlan left promiscuous mode [ 182.212113][ T4249] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 182.417011][ T4516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.538497][ T27] audit: type=1800 audit(1746711991.600:23): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.390" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 182.705742][ T5990] fuse: Bad value for 'group_id' [ 183.154607][ T5996] loop2: detected capacity change from 0 to 256 [ 183.243191][ T5996] FAT-fs (loop2): Directory bread(block 64) failed [ 183.254824][ T5996] FAT-fs (loop2): Directory bread(block 65) failed [ 183.282110][ T5996] FAT-fs (loop2): Directory bread(block 66) failed [ 183.288904][ T5996] FAT-fs (loop2): Directory bread(block 67) failed [ 183.307562][ T5996] FAT-fs (loop2): Directory bread(block 68) failed [ 183.317237][ T5996] FAT-fs (loop2): Directory bread(block 69) failed [ 183.324058][ T5996] FAT-fs (loop2): Directory bread(block 70) failed [ 183.332288][ T5996] FAT-fs (loop2): Directory bread(block 71) failed [ 183.339080][ T5996] FAT-fs (loop2): Directory bread(block 72) failed [ 183.346097][ T5996] FAT-fs (loop2): Directory bread(block 73) failed [ 183.491299][ T4516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.651115][ T4259] Bluetooth: hci4: command 0x0419 tx timeout [ 184.012760][ T6003] netlink: 160 bytes leftover after parsing attributes in process `syz.2.396'. [ 184.243453][ T11] team0 (unregistering): Port device team_slave_1 removed [ 184.310520][ T11] team0 (unregistering): Port device team_slave_0 removed [ 184.384374][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.458855][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.536212][ T4303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.614887][ T5986] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 184.773926][ T4301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.076195][ T11] bond0 (unregistering): Released all slaves [ 185.202835][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 185.250120][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.397'. [ 185.420895][ T6011] loop0: detected capacity change from 0 to 256 [ 185.570077][ T4516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.596739][ T6011] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.740201][ T6011] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 185.761261][ T6011] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x9eba79a2, utbl_chksum : 0xe619d30d) [ 185.833111][ T27] audit: type=1326 audit(1746711994.900:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.2.400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b68f8e969 code=0x0 [ 185.971781][ T5805] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 186.017145][ T5805] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 186.083989][ T5805] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 186.137426][ T5805] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 186.608932][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.610723][ T4303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.680147][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.688345][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.738621][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.763969][ T6038] loop3: detected capacity change from 0 to 2048 [ 186.786404][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.824188][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.837520][ T6038] UDF-fs: bad mount option "00000000000000000003  " or missing value [ 186.858963][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.866225][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.909661][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.950923][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 186.970072][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 187.028193][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.078173][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.123415][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.130629][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.150099][ T6038] loop3: detected capacity change from 0 to 2048 [ 187.157197][ T6038] UDF-fs: bad mount option "s" or missing value [ 187.206886][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.226296][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.405726][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.465610][ T6055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.467648][ T6028] loop0: detected capacity change from 0 to 32768 [ 187.481208][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.495927][ T6028] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.403 (6028) [ 187.506924][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.548190][ T6028] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 187.568918][ T6028] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 187.631319][ T6028] BTRFS info (device loop0): allowing degraded mounts [ 187.631514][ T6055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.638454][ T6028] BTRFS info (device loop0): setting nodatasum [ 187.638482][ T6028] BTRFS info (device loop0): disabling tree log [ 187.638499][ T6028] BTRFS info (device loop0): using free space tree [ 187.651008][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.674502][ T4302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.724327][ T6055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.810142][ T4301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.856581][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.872217][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.874062][ T6059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.881721][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.904680][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.919190][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.933859][ T5805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.977785][ T6075] loop3: detected capacity change from 0 to 256 [ 188.036129][ T6075] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.050282][ T6075] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 188.148842][ T6075] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x9eba79a2, utbl_chksum : 0xe619d30d) [ 188.306856][ T6028] BTRFS info (device loop0): balance: start -d -m [ 188.392354][ T6028] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 188.694174][ T6028] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 188.957806][ T6028] BTRFS info (device loop0): found 9 extents, stage: move data extents [ 188.990688][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.000731][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.191665][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.234798][ T27] audit: type=1326 audit(1746711998.300:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.2.416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b68f8e969 code=0x0 [ 189.236107][ T6028] BTRFS info (device loop0): balance: canceled [ 189.395736][ T4254] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.730160][ T5138] net_ratelimit: 29 callbacks suppressed [ 189.730179][ T5138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.247860][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 190.370344][ T5138] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 190.569908][ T5138] usb 3-1: Using ep0 maxpacket: 16 [ 190.577279][ T5138] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 190.596416][ T5138] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.614361][ T5138] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.646418][ T5138] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.665655][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.665848][ T5138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.691502][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.700371][ T5138] usb 3-1: Product: syz [ 190.707953][ T5138] usb 3-1: Manufacturer: syz [ 190.713764][ T5138] usb 3-1: SerialNumber: syz [ 190.770114][ T6109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.850657][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.860918][ T4301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.877163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.917193][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.931210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.984313][ T5805] device veth0_vlan entered promiscuous mode [ 191.007295][ T5805] device veth1_vlan entered promiscuous mode [ 191.043979][ T6141] loop3: detected capacity change from 0 to 4096 [ 191.134946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.143431][ T5138] usb 3-1: 0:2 : does not exist [ 191.153752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.230989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.269704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.314840][ T5805] device veth0_macvtap entered promiscuous mode [ 191.530901][ T5805] device veth1_macvtap entered promiscuous mode [ 191.671633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.691321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.726493][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.777125][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.810579][ T4433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.847347][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.902933][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.943868][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.979738][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.990124][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.002467][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.019389][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.030692][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.057297][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.114342][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.173000][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.183098][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.193734][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.218760][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.279828][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.304320][ T5138] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 192.326768][ T5805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.370142][ T5805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.400555][ T5138] usb 3-1: USB disconnect, device number 4 [ 192.421446][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.463541][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.488109][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.623021][ T5805] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.679649][ T5805] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.719857][ T5805] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.761030][ T5805] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.850211][ T6109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.991749][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.370396][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.503109][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.550341][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.595285][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.604677][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.620209][ T5459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 193.880928][ T27] audit: type=1326 audit(1746712002.950:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.2.430" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b68f8e969 code=0x0 [ 193.904324][ T4629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.914244][ T6109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.248587][ T6160] loop3: detected capacity change from 0 to 32768 [ 194.285068][ T6160] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.427 (6160) [ 194.300350][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.300515][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.503334][ T6160] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.565353][ T6160] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 194.665046][ T6160] BTRFS info (device loop3): allowing degraded mounts [ 194.738314][ T6160] BTRFS info (device loop3): setting nodatasum [ 194.765227][ T6160] BTRFS info (device loop3): disabling tree log [ 194.785892][ T6160] BTRFS info (device loop3): using free space tree [ 194.940170][ T6109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.012428][ T6206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.020829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.142494][ T6216] loop5: detected capacity change from 0 to 64 [ 195.271431][ T6160] BTRFS info (device loop3): balance: start -d -m [ 195.335205][ T6160] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 195.560494][ T6160] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 195.776216][ T6227] loop1: detected capacity change from 0 to 2048 [ 195.807744][ T6160] BTRFS info (device loop3): found 9 extents, stage: move data extents [ 195.807864][ T6227] UDF-fs: bad mount option "00000000000000000003  " or missing value [ 195.843682][ T6231] netlink: 20 bytes leftover after parsing attributes in process `syz.5.438'. [ 195.931851][ T6231] netlink: 20 bytes leftover after parsing attributes in process `syz.5.438'. [ 195.942536][ T6234] loop0: detected capacity change from 0 to 1024 [ 195.953341][ T6160] BTRFS info (device loop3): balance: canceled [ 196.006981][ T6227] loop1: detected capacity change from 0 to 2048 [ 196.101540][ T6227] UDF-fs: bad mount option "s" or missing value [ 196.174904][ T4498] blk_print_req_error: 25 callbacks suppressed [ 196.174923][ T4498] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.272708][ T6234] hfsplus: can't free extent [ 196.397867][ T4250] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.495650][ T27] audit: type=1326 audit(1746712005.560:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6238 comm="syz.2.441" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b68f8e969 code=0x0 [ 196.813143][ T6252] loop5: detected capacity change from 0 to 256 [ 196.915009][ T6252] FAT-fs (loop5): Directory bread(block 64) failed [ 196.943258][ T6252] FAT-fs (loop5): Directory bread(block 65) failed [ 196.962182][ T6252] FAT-fs (loop5): Directory bread(block 66) failed [ 196.978997][ T6252] FAT-fs (loop5): Directory bread(block 67) failed [ 196.995276][ T6252] FAT-fs (loop5): Directory bread(block 68) failed [ 197.160299][ T6252] FAT-fs (loop5): Directory bread(block 69) failed [ 197.223292][ T6252] FAT-fs (loop5): Directory bread(block 70) failed [ 197.229969][ T6252] FAT-fs (loop5): Directory bread(block 71) failed [ 197.236612][ T6252] FAT-fs (loop5): Directory bread(block 72) failed [ 197.256002][ T6252] FAT-fs (loop5): Directory bread(block 73) failed [ 197.515191][ T6262] loop2: detected capacity change from 0 to 4096 [ 198.227350][ T6263] dccp_close: ABORT with 64 bytes unread [ 199.330395][ T27] audit: type=1326 audit(1746712008.390:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6298 comm="syz.5.458" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0129d8e969 code=0x0 [ 200.086866][ T6306] loop2: detected capacity change from 0 to 256 [ 200.219328][ T6306] FAT-fs (loop2): Directory bread(block 64) failed [ 200.235778][ T6306] FAT-fs (loop2): Directory bread(block 65) failed [ 200.248023][ T6312] loop1: detected capacity change from 0 to 16 [ 200.304492][ T6306] FAT-fs (loop2): Directory bread(block 66) failed [ 200.329926][ T6306] FAT-fs (loop2): Directory bread(block 67) failed [ 200.347207][ T6306] FAT-fs (loop2): Directory bread(block 68) failed [ 200.358793][ T6312] erofs: (device loop1): mounted with root inode @ nid 36. [ 200.409202][ T6306] FAT-fs (loop2): Directory bread(block 69) failed [ 200.445407][ T6306] FAT-fs (loop2): Directory bread(block 70) failed [ 200.493726][ T6286] loop3: detected capacity change from 0 to 32768 [ 200.495922][ T6306] FAT-fs (loop2): Directory bread(block 71) failed [ 200.547436][ T6286] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.453 (6286) [ 200.598430][ T6306] FAT-fs (loop2): Directory bread(block 72) failed [ 200.615713][ T6306] FAT-fs (loop2): Directory bread(block 73) failed [ 200.649613][ T6286] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 200.692759][ T6286] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 200.733356][ T6286] BTRFS info (device loop3): allowing degraded mounts [ 200.770091][ T6286] BTRFS info (device loop3): setting nodatasum [ 200.796917][ T6286] BTRFS info (device loop3): disabling tree log [ 200.837591][ T6286] BTRFS info (device loop3): using free space tree [ 201.031029][ T6341] loop5: detected capacity change from 0 to 4096 [ 201.134011][ T6286] BTRFS info (device loop3): balance: start -d -m [ 201.161733][ T6286] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 201.424763][ T6286] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 201.956426][ T27] audit: type=1326 audit(1746712011.020:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.2.471" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b68f8e969 code=0x0 [ 202.157338][ T6286] BTRFS info (device loop3): found 9 extents, stage: move data extents [ 202.592826][ T6286] BTRFS info (device loop3): balance: canceled [ 203.080569][ T4250] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 204.202224][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 204.615196][ T6405] loop1: detected capacity change from 0 to 1024 [ 204.709101][ T6405] hfsplus: can't free extent [ 205.226199][ T11] team0: Port device team_slave_0 removed [ 205.549992][ T27] audit: type=1326 audit(1746712014.360:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.0.483" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5c598e969 code=0x0 [ 206.254975][ T6427] loop2: detected capacity change from 0 to 1024 [ 206.412793][ T6427] hfsplus: can't free extent [ 206.609924][ T4259] Bluetooth: hci2: command 0x0406 tx timeout [ 206.616013][ T4259] Bluetooth: hci1: command 0x0406 tx timeout [ 206.622148][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 206.658510][ T6446] Bluetooth: MGMT ver 1.22 [ 206.848206][ T6444] loop0: detected capacity change from 0 to 2048 [ 206.859872][ T4260] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 207.051557][ T6451] netlink: 'syz.1.498': attribute type 1 has an invalid length. [ 207.451999][ T27] audit: type=1326 audit(1746712016.200:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.2.497" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b68f8e969 code=0x0 [ 207.473726][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.552658][ T4260] usb 4-1: Using ep0 maxpacket: 32 [ 207.895386][ T6451] netlink: 124 bytes leftover after parsing attributes in process `syz.1.498'. [ 207.915408][ T6454] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.937859][ T4260] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 207.989625][ T4260] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.010620][ T6454] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 208.195823][ T6454] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 208.220697][ T4260] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 208.242785][ T6454] Remounting filesystem read-only [ 208.384427][ T4260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.396625][ T4260] usb 4-1: Product: syz [ 208.396668][ T6444] NILFS (loop0): mounting fs with errors [ 208.403248][ T4260] usb 4-1: Manufacturer: syz [ 208.428973][ T27] audit: type=1326 audit(1746712017.490:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.1.500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fadb4b8e969 code=0x0 [ 208.451260][ T4260] usb 4-1: SerialNumber: syz [ 208.464567][ T6444] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 208.519216][ T6444] Remounting filesystem read-only [ 208.640685][ T4254] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 208.730537][ T4260] usbhid 4-1:1.0: can't add hid device: -71 [ 208.766691][ T4260] usbhid: probe of 4-1:1.0 failed with error -71 [ 208.835849][ T4260] usb 4-1: USB disconnect, device number 6 [ 209.959929][ T14] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 210.149981][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 210.161642][ T14] usb 2-1: config 0 has no interfaces? [ 210.210876][ T14] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.226536][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 210.238476][ T14] usb 2-1: SerialNumber: syz [ 210.278499][ T14] usb 2-1: config 0 descriptor?? [ 210.561086][ T34] tipc: Subscription rejected, illegal request [ 210.563084][ T6109] usb 2-1: USB disconnect, device number 12 [ 211.080047][ T27] audit: type=1326 audit(1746712020.100:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6501 comm="syz.0.509" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5c598e969 code=0x0 [ 211.211731][ T6511] loop5: detected capacity change from 0 to 2048 [ 211.226953][ T6511] UDF-fs: bad mount option "00000000000000000003  " or missing value [ 211.850440][ T4269] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.944122][ T6508] loop5: detected capacity change from 0 to 2048 [ 211.960630][ T6508] UDF-fs: bad mount option "s" or missing value [ 211.997028][ T4269] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 212.169663][ T6526] loop1: detected capacity change from 0 to 256 [ 212.231436][ T6109] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 212.272978][ T6526] FAT-fs (loop1): Directory bread(block 64) failed [ 212.318795][ T6526] FAT-fs (loop1): Directory bread(block 65) failed [ 212.331437][ T6526] FAT-fs (loop1): Directory bread(block 66) failed [ 212.339056][ T6526] FAT-fs (loop1): Directory bread(block 67) failed [ 212.357046][ T6526] FAT-fs (loop1): Directory bread(block 68) failed [ 212.377384][ T6526] FAT-fs (loop1): Directory bread(block 69) failed [ 212.398696][ T6526] FAT-fs (loop1): Directory bread(block 70) failed [ 212.419208][ T6526] FAT-fs (loop1): Directory bread(block 71) failed [ 212.439204][ T6526] FAT-fs (loop1): Directory bread(block 72) failed [ 212.459970][ T6109] usb 1-1: Using ep0 maxpacket: 16 [ 212.471406][ T6109] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 212.483066][ T6526] FAT-fs (loop1): Directory bread(block 73) failed [ 212.535356][ T6109] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.546823][ T6109] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.586330][ T6109] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.613216][ T6109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.666966][ T6109] usb 1-1: Product: syz [ 212.674810][ T6109] usb 1-1: Manufacturer: syz [ 212.679484][ T6109] usb 1-1: SerialNumber: syz [ 213.124873][ T6109] usb 1-1: 0:2 : does not exist [ 213.327227][ T27] audit: type=1326 audit(1746712022.390:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.5.523" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0129d8e969 code=0x0 [ 213.350600][ T14] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 213.549672][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.705823][ T14] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 213.899272][ T14] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 213.949233][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.017002][ T14] usb 3-1: config 0 descriptor?? [ 214.047242][ T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 214.060241][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 214.090927][ T14] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 214.132119][ T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 214.187835][ T14] usb 3-1: media controller created [ 214.216652][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.251773][ T6551] dvb-usb: bulk message failed: -22 (2/0) [ 214.264752][ T14] dvb-usb: bulk message failed: -22 (6/0) [ 214.274336][ T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 214.294706][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 214.308208][ T14] dvb-usb: schedule remote query interval to 150 msecs. [ 214.315923][ T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 214.326899][ T6574] loop5: detected capacity change from 0 to 2048 [ 214.340869][ T14] usb 3-1: USB disconnect, device number 5 [ 214.362822][ T6574] UDF-fs: bad mount option "00000000000000000003  " or missing value [ 214.394073][ T14] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 214.428717][ T6109] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 214.458613][ T4241] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 214.485861][ T6109] usb 1-1: USB disconnect, device number 8 [ 214.517171][ T6574] loop5: detected capacity change from 0 to 2048 [ 214.526396][ T6574] UDF-fs: bad mount option "s" or missing value [ 214.544875][ T952] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 214.750098][ T952] usb 2-1: Using ep0 maxpacket: 32 [ 214.758623][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.791099][ T952] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 214.807459][ T952] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.844314][ T952] usb 2-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 214.849885][ T6546] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 214.888200][ T6584] loop5: detected capacity change from 0 to 128 [ 214.890030][ T952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.916591][ T952] usb 2-1: Product: syz [ 214.921213][ T952] usb 2-1: Manufacturer: syz [ 214.925871][ T952] usb 2-1: SerialNumber: syz [ 214.951350][ T6584] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 214.991335][ T6584] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.044309][ T6588] netlink: 60 bytes leftover after parsing attributes in process `syz.2.532'. [ 215.054872][ T6588] netlink: 60 bytes leftover after parsing attributes in process `syz.2.532'. [ 215.166264][ T6592] loop0: detected capacity change from 0 to 256 [ 215.182227][ T952] usbhid 2-1:1.0: can't add hid device: -71 [ 215.199555][ T952] usbhid: probe of 2-1:1.0 failed with error -71 [ 215.233659][ T952] usb 2-1: USB disconnect, device number 13 [ 215.241553][ T6592] FAT-fs (loop0): Directory bread(block 64) failed [ 215.251668][ T6592] FAT-fs (loop0): Directory bread(block 65) failed [ 215.274684][ T6592] FAT-fs (loop0): Directory bread(block 66) failed [ 215.287356][ T6592] FAT-fs (loop0): Directory bread(block 67) failed [ 215.304595][ T6592] FAT-fs (loop0): Directory bread(block 68) failed [ 215.312412][ T6592] FAT-fs (loop0): Directory bread(block 69) failed [ 215.319185][ T6592] FAT-fs (loop0): Directory bread(block 70) failed [ 215.344835][ T6592] FAT-fs (loop0): Directory bread(block 71) failed [ 215.351952][ T6592] FAT-fs (loop0): Directory bread(block 72) failed [ 215.358623][ T6592] FAT-fs (loop0): Directory bread(block 73) failed [ 215.436257][ T5805] EXT4-fs (loop5): unmounting filesystem. [ 215.980756][ T27] audit: type=1326 audit(1746712024.930:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6600 comm="syz.5.536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0129d8e969 code=0x0 [ 216.749379][ T6614] loop0: detected capacity change from 0 to 2048 [ 216.769155][ T6614] UDF-fs: bad mount option "00000000000000000003  " or missing value [ 217.234861][ T6628] capability: warning: `syz.1.546' uses deprecated v2 capabilities in a way that may be insecure [ 217.289857][ T4516] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 217.492961][ T4516] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.505356][ T4516] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 217.515950][ T4516] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 217.526004][ T4516] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.538493][ T4516] usb 6-1: config 0 descriptor?? [ 217.547933][ T4516] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 217.555549][ T4516] dvb-usb: bulk message failed: -22 (3/0) [ 217.564238][ T4516] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 217.574044][ T4516] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 217.581777][ T4516] usb 6-1: media controller created [ 217.596064][ T4516] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.608054][ T4516] dvb-usb: bulk message failed: -22 (6/0) [ 217.616595][ T4516] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 217.626844][ T4516] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 217.640603][ T4516] dvb-usb: schedule remote query interval to 150 msecs. [ 217.648341][ T4516] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 217.724196][ T6640] loop1: detected capacity change from 0 to 2048 [ 217.746856][ T6640] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 217.813044][ T6109] dvb-usb: bulk message failed: -22 (1/0) [ 217.820487][ T6109] dvb-usb: error while querying for an remote control event. [ 217.834914][ T6621] dvb-usb: bulk message failed: -22 (2/0) [ 217.891891][ T6640] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 217.905734][ T4301] usb 6-1: USB disconnect, device number 2 [ 217.926538][ T6640] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 217.945171][ T6640] UDF-fs: Scanning with blocksize 512 failed [ 217.958064][ T4301] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 218.000893][ T6640] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.570966][ T6653] netlink: 60 bytes leftover after parsing attributes in process `syz.1.552'. [ 218.597803][ T6653] netlink: 60 bytes leftover after parsing attributes in process `syz.1.552'. [ 219.109341][ T6666] loop3: detected capacity change from 0 to 2048 [ 219.165450][ T6666] UDF-fs: bad mount option "00000000000000000003  " or missing value [ 219.397868][ T27] audit: type=1326 audit(1746712028.460:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0129d8e969 code=0x7ffc0000 [ 219.490330][ T6635] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 219.503903][ T27] audit: type=1326 audit(1746712028.500:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0129d8e969 code=0x7ffc0000 [ 219.583051][ T27] audit: type=1326 audit(1746712028.500:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0129d8e969 code=0x7ffc0000 [ 219.639916][ T27] audit: type=1326 audit(1746712028.500:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0129d8e969 code=0x7ffc0000 [ 219.675933][ T6684] loop1: detected capacity change from 0 to 256 [ 219.697541][ T27] audit: type=1326 audit(1746712028.500:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0129d8e969 code=0x7ffc0000 [ 219.729744][ T6684] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 219.798030][ T27] audit: type=1326 audit(1746712028.500:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0129d8e969 code=0x7ffc0000 [ 219.874450][ T27] audit: type=1326 audit(1746712028.500:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0129d8e969 code=0x7ffc0000 [ 219.910174][ T4301] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 219.936306][ T27] audit: type=1326 audit(1746712028.510:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0129d8e969 code=0x7ffc0000 [ 219.969550][ T27] audit: type=1326 audit(1746712028.520:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0129d8e969 code=0x7ffc0000 [ 220.022772][ T27] audit: type=1326 audit(1746712028.520:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6671 comm="syz.5.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0129d8e969 code=0x7ffc0000 [ 220.099996][ T4301] usb 4-1: Using ep0 maxpacket: 16 [ 220.107140][ T4301] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 220.152841][ T4301] usb 4-1: config 0 has no interface number 0 [ 220.187613][ T4301] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 220.231681][ T4301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.252963][ T4301] usb 4-1: Product: syz [ 220.274215][ T4301] usb 4-1: Manufacturer: syz [ 220.278900][ T4301] usb 4-1: SerialNumber: syz [ 220.337139][ T4301] usb 4-1: config 0 descriptor?? [ 220.377319][ T4301] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 220.448320][ T6706] loop5: detected capacity change from 0 to 256 [ 220.549244][ T6706] FAT-fs (loop5): Directory bread(block 64) failed [ 220.574516][ T6706] FAT-fs (loop5): Directory bread(block 65) failed [ 220.592180][ T6706] FAT-fs (loop5): Directory bread(block 66) failed [ 220.599290][ T6706] FAT-fs (loop5): Directory bread(block 67) failed [ 220.626828][ T6706] FAT-fs (loop5): Directory bread(block 68) failed [ 220.646978][ T6706] FAT-fs (loop5): Directory bread(block 69) failed [ 220.657259][ T6706] FAT-fs (loop5): Directory bread(block 70) failed [ 220.672046][ T6706] FAT-fs (loop5): Directory bread(block 71) failed [ 220.678893][ T6706] FAT-fs (loop5): Directory bread(block 72) failed [ 220.690084][ T4516] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 220.697245][ T6706] FAT-fs (loop5): Directory bread(block 73) failed [ 220.898064][ T4516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 220.949458][ T4516] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 221.035251][ T4516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 221.070212][ T4516] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 221.095940][ T4516] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 221.159533][ T4516] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.193078][ T4516] usb 2-1: Product: syz [ 221.217634][ T4516] usb 2-1: Manufacturer: syz [ 221.234089][ T4516] usb 2-1: SerialNumber: syz [ 221.247302][ T4516] usb 2-1: config 0 descriptor?? [ 221.269231][ T4516] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 221.404083][ T6723] loop5: detected capacity change from 0 to 2048 [ 221.481659][ T6723] UDF-fs: bad mount option "00000000000000000003  " or missing value [ 221.543985][ T4516] scsi host1: usb-storage 2-1:0.0 [ 221.805354][ T6733] loop2: detected capacity change from 0 to 64 [ 221.813654][ T4626] usb 2-1: USB disconnect, device number 14 [ 221.982982][ T4301] gspca_spca1528: reg_r err -71 [ 221.988113][ T4301] spca1528: probe of 4-1:0.1 failed with error -71 [ 222.039757][ T4301] usb 4-1: USB disconnect, device number 7 [ 223.080089][ T4301] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 223.211957][ T6769] loop0: detected capacity change from 0 to 256 [ 223.299896][ T4301] usb 6-1: Using ep0 maxpacket: 32 [ 223.307218][ T4301] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 223.313267][ T6769] FAT-fs (loop0): Directory bread(block 64) failed [ 223.346607][ T4301] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.382704][ T4301] usb 6-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 223.383892][ T6769] FAT-fs (loop0): Directory bread(block 65) failed [ 223.412189][ T4301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.425806][ T6769] FAT-fs (loop0): Directory bread(block 66) failed [ 223.438292][ T4301] usb 6-1: Product: syz [ 223.445481][ T6769] FAT-fs (loop0): Directory bread(block 67) failed [ 223.452257][ T4301] usb 6-1: Manufacturer: syz [ 223.465724][ T6769] FAT-fs (loop0): Directory bread(block 68) failed [ 223.467277][ T4301] usb 6-1: SerialNumber: syz [ 223.487648][ T6769] FAT-fs (loop0): Directory bread(block 69) failed [ 223.507968][ T6769] FAT-fs (loop0): Directory bread(block 70) failed [ 223.519000][ T6769] FAT-fs (loop0): Directory bread(block 71) failed [ 223.543576][ T6769] FAT-fs (loop0): Directory bread(block 72) failed [ 223.554615][ T6769] FAT-fs (loop0): Directory bread(block 73) failed [ 223.622544][ T6747] loop1: detected capacity change from 0 to 32768 [ 223.670580][ T6747] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.573 (6747) [ 223.746004][ T4301] usbhid 6-1:1.0: can't add hid device: -71 [ 223.752828][ T6747] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 223.770022][ T4301] usbhid: probe of 6-1:1.0 failed with error -71 [ 223.786771][ T6747] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 223.809218][ T4301] usb 6-1: USB disconnect, device number 3 [ 223.839390][ T6747] BTRFS info (device loop1): using free space tree [ 223.859318][ T4280] kworker/u4:5: attempt to access beyond end of device [ 223.859318][ T4280] loop0: rw=1, sector=1224, nr_sectors = 404 limit=256 [ 224.045913][ T6747] BTRFS info (device loop1): enabling ssd optimizations [ 224.090490][ T6798] loop0: detected capacity change from 0 to 256 [ 224.135625][ T6798] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 224.275655][ T4249] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 224.795493][ T6805] netlink: 'syz.0.581': attribute type 39 has an invalid length. [ 224.850125][ T6755] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 225.053033][ T6820] loop1: detected capacity change from 0 to 2048 [ 225.075804][ T6820] UDF-fs: bad mount option "s" or missing value [ 225.574674][ T6828] loop5: detected capacity change from 0 to 8 [ 225.610683][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 225.620635][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 225.736925][ T6837] fuse: Unknown parameter 'group_id00000000000000000000' [ 225.789949][ T4433] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 225.953853][ T6841] loop5: detected capacity change from 0 to 256 [ 225.984696][ T4433] usb 2-1: Using ep0 maxpacket: 16 [ 225.996874][ T4433] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 226.026054][ T4433] usb 2-1: config 0 has no interface number 0 [ 226.059309][ T4433] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 226.069482][ T6841] FAT-fs (loop5): Directory bread(block 64) failed [ 226.081681][ T6841] FAT-fs (loop5): Directory bread(block 65) failed [ 226.089095][ T4433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.102777][ T6841] FAT-fs (loop5): Directory bread(block 66) failed [ 226.114916][ T4433] usb 2-1: Product: syz [ 226.116595][ T6841] FAT-fs (loop5): Directory bread(block 67) failed [ 226.135212][ T4433] usb 2-1: Manufacturer: syz [ 226.145594][ T4433] usb 2-1: SerialNumber: syz [ 226.145855][ T6841] FAT-fs (loop5): Directory bread(block 68) failed [ 226.167282][ T4433] usb 2-1: config 0 descriptor?? [ 226.186506][ T6841] FAT-fs (loop5): Directory bread(block 69) failed [ 226.189194][ T4433] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 226.196712][ T6841] FAT-fs (loop5): Directory bread(block 70) failed [ 226.226561][ T6841] FAT-fs (loop5): Directory bread(block 71) failed [ 226.240071][ T6841] FAT-fs (loop5): Directory bread(block 72) failed [ 226.283475][ T6841] FAT-fs (loop5): Directory bread(block 73) failed [ 226.332458][ T6109] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 226.498514][ T46] kworker/u4:3: attempt to access beyond end of device [ 226.498514][ T46] loop5: rw=1, sector=1224, nr_sectors = 404 limit=256 [ 226.539928][ T6109] usb 1-1: Using ep0 maxpacket: 32 [ 226.547300][ T6109] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 226.609576][ T6109] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.682878][ T6109] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 226.719860][ T6109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.749183][ T6109] usb 1-1: Product: syz [ 226.769531][ T6109] usb 1-1: Manufacturer: syz [ 226.779649][ T6109] usb 1-1: SerialNumber: syz [ 226.916178][ T6848] loop3: detected capacity change from 0 to 32768 [ 226.941804][ T6868] random: crng reseeded on system resumption [ 226.950113][ T6848] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.591 (6848) [ 227.019589][ T6848] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 227.037343][ T6109] usbhid 1-1:1.0: can't add hid device: -71 [ 227.053681][ T6109] usbhid: probe of 1-1:1.0 failed with error -71 [ 227.071090][ T6848] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 227.104071][ T6109] usb 1-1: USB disconnect, device number 9 [ 227.126979][ T6848] BTRFS info (device loop3): using free space tree [ 227.409977][ T6848] BTRFS info (device loop3): enabling ssd optimizations [ 227.549928][ T4250] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 227.803279][ T4433] gspca_spca1528: reg_r err -71 [ 227.808254][ T4433] spca1528: probe of 2-1:0.1 failed with error -71 [ 227.824075][ T4433] usb 2-1: USB disconnect, device number 15 [ 228.432638][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 228.476162][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 228.557560][ T6923] loop3: detected capacity change from 0 to 1024 [ 228.685126][ T6928] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 228.691806][ T6928] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 228.703620][ T6928] vhci_hcd vhci_hcd.0: Device attached [ 228.730517][ T6928] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 228.737099][ T6928] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 228.745312][ T6928] vhci_hcd vhci_hcd.0: Device attached [ 228.754889][ T6928] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 228.771897][ T6928] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 228.777364][ T4280] hfsplus: b-tree write err: -5, ino 4 [ 228.778614][ T6928] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 228.778866][ T6928] vhci_hcd vhci_hcd.0: Device attached [ 228.799941][ T6934] vhci_hcd: connection closed [ 228.804723][ T6932] vhci_hcd: connection closed [ 228.811262][ T57] vhci_hcd: stop threads [ 228.823384][ T6929] vhci_hcd: connection closed [ 228.836016][ T57] vhci_hcd: release socket [ 228.873182][ T57] vhci_hcd: disconnect device [ 228.887795][ T57] vhci_hcd: stop threads [ 228.892854][ T57] vhci_hcd: release socket [ 228.900271][ T4433] vhci_hcd: vhci_device speed not set [ 228.901331][ T57] vhci_hcd: disconnect device [ 228.921537][ T57] vhci_hcd: stop threads [ 228.925833][ T57] vhci_hcd: release socket [ 228.939215][ T57] vhci_hcd: disconnect device [ 228.970213][ T4433] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 228.984599][ T4433] usb 33-1: enqueue for inactive port 0 [ 229.080031][ T4433] vhci_hcd: vhci_device speed not set [ 229.824454][ T6946] loop3: detected capacity change from 0 to 32768 [ 229.848840][ T6946] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.607 (6946) [ 229.892208][ T6946] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 229.968548][ T6946] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 229.970337][ T6906] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 230.003522][ T6946] BTRFS info (device loop3): using free space tree [ 230.304648][ T6946] BTRFS info (device loop3): enabling ssd optimizations [ 230.429991][ T4519] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 230.561243][ T4250] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 230.605323][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 230.629873][ T4519] usb 2-1: Using ep0 maxpacket: 16 [ 230.638008][ T4519] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.668305][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 230.697912][ T4519] usb 2-1: config 0 has no interface number 0 [ 230.720374][ T4519] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 230.788439][ T4519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.816915][ T4519] usb 2-1: Product: syz [ 230.840189][ T4519] usb 2-1: Manufacturer: syz [ 230.994734][ T4519] usb 2-1: SerialNumber: syz [ 231.031657][ T4519] usb 2-1: config 0 descriptor?? [ 231.090760][ T4519] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 231.475939][ T6992] loop5: detected capacity change from 0 to 256 [ 231.571118][ T6992] FAT-fs (loop5): Directory bread(block 64) failed [ 231.589677][ T6992] FAT-fs (loop5): Directory bread(block 65) failed [ 231.610919][ T6992] FAT-fs (loop5): Directory bread(block 66) failed [ 231.617523][ T6992] FAT-fs (loop5): Directory bread(block 67) failed [ 231.635394][ T6992] FAT-fs (loop5): Directory bread(block 68) failed [ 231.659941][ T6992] FAT-fs (loop5): Directory bread(block 69) failed [ 231.666619][ T6992] FAT-fs (loop5): Directory bread(block 70) failed [ 231.687955][ T6992] FAT-fs (loop5): Directory bread(block 71) failed [ 231.716933][ T6992] FAT-fs (loop5): Directory bread(block 72) failed [ 231.754025][ T6992] FAT-fs (loop5): Directory bread(block 73) failed [ 231.919145][ T7005] loop2: detected capacity change from 0 to 1024 [ 232.004944][ T57] kworker/u4:4: attempt to access beyond end of device [ 232.004944][ T57] loop5: rw=1, sector=1224, nr_sectors = 404 limit=256 [ 232.007052][ T7005] hfsplus: can't free extent [ 232.179993][ T5241] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 232.399994][ T5241] usb 1-1: Using ep0 maxpacket: 32 [ 232.412225][ T5241] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.435954][ T5241] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.472280][ T5241] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 232.489839][ T5241] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 232.504989][ T5241] usb 1-1: Product: syz [ 232.519528][ T5241] usb 1-1: Manufacturer: syz [ 232.524670][ T5241] usb 1-1: SerialNumber: syz [ 232.540926][ T5241] usb 1-1: config 0 descriptor?? [ 232.563081][ T5241] hub 1-1:0.0: bad descriptor, ignoring hub [ 232.569226][ T5241] hub: probe of 1-1:0.0 failed with error -5 [ 232.696018][ T7012] loop3: detected capacity change from 0 to 32768 [ 232.707921][ T4519] gspca_spca1528: reg_r err -71 [ 232.708607][ T7012] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.625 (7012) [ 232.716136][ T4519] spca1528: probe of 2-1:0.1 failed with error -71 [ 232.760874][ T4519] usb 2-1: USB disconnect, device number 16 [ 232.790013][ T7012] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 232.806783][ T7012] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 232.822295][ T7012] BTRFS info (device loop3): using free space tree [ 232.920247][ T5241] usb 1-1: USB disconnect, device number 10 [ 232.946011][ T7012] BTRFS info (device loop3): enabling ssd optimizations [ 233.000535][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 233.000550][ T27] audit: type=1804 audit(1746712042.060:49): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.625" name="/newroot/127/file0/file1" dev="loop3" ino=260 res=1 errno=0 [ 233.079716][ T4250] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 233.726652][ T27] audit: type=1326 audit(1746712042.790:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.3.627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c3dd8e969 code=0x0 [ 234.450015][ T7017] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 234.741786][ T7060] loop1: detected capacity change from 0 to 256 [ 234.808992][ T7060] FAT-fs (loop1): Directory bread(block 64) failed [ 234.827054][ T7060] FAT-fs (loop1): Directory bread(block 65) failed [ 234.838161][ T7062] loop3: detected capacity change from 0 to 1024 [ 234.846481][ T7060] FAT-fs (loop1): Directory bread(block 66) failed [ 234.869057][ T7060] FAT-fs (loop1): Directory bread(block 67) failed [ 234.876713][ T7060] FAT-fs (loop1): Directory bread(block 68) failed [ 234.907982][ T7062] hfsplus: can't free extent [ 234.916723][ T7060] FAT-fs (loop1): Directory bread(block 69) failed [ 234.941577][ T7060] FAT-fs (loop1): Directory bread(block 70) failed [ 234.968588][ T7060] FAT-fs (loop1): Directory bread(block 71) failed [ 235.003330][ T7060] FAT-fs (loop1): Directory bread(block 72) failed [ 235.049373][ T7060] FAT-fs (loop1): Directory bread(block 73) failed [ 235.466705][ T5375] kworker/u4:8: attempt to access beyond end of device [ 235.466705][ T5375] loop1: rw=1, sector=1224, nr_sectors = 404 limit=256 [ 235.501016][ T7077] fuse: Bad value for 'fd' [ 235.782353][ T7080] loop8: detected capacity change from 0 to 8 [ 235.794273][ T4269] Dev loop8: unable to read RDB block 8 [ 235.800225][ T4269] loop8: unable to read partition table [ 235.806220][ T4269] loop8: partition table beyond EOD, truncated [ 235.818294][ T7080] Dev loop8: unable to read RDB block 8 [ 235.828337][ T7080] loop8: unable to read partition table [ 235.835597][ T7080] loop8: partition table beyond EOD, truncated [ 235.883174][ T7080] loop_reread_partitions: partition scan of loop8 (■швлx№^>рЦ Б) failed (rc=-5) [ 236.194450][ T7072] loop5: detected capacity change from 0 to 32768 [ 236.203875][ T7072] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.637 (7072) [ 236.234289][ T7072] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 236.244897][ T7072] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 236.255147][ T7072] BTRFS info (device loop5): using free space tree [ 236.624212][ T7072] BTRFS info (device loop5): enabling ssd optimizations [ 236.721282][ T27] audit: type=1804 audit(1746712045.790:51): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.637" name="/newroot/49/file0/file1" dev="loop5" ino=260 res=1 errno=0 [ 236.742784][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.994580][ T5805] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 238.124058][ T7123] loop0: detected capacity change from 0 to 2048 [ 238.223712][ T7134] fuse: Bad value for 'fd' [ 238.232942][ T7131] loop1: detected capacity change from 0 to 256 [ 238.271376][ T7123] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 238.295342][ T7123] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 238.401799][ T7131] FAT-fs (loop1): Directory bread(block 64) failed [ 238.434538][ T7131] FAT-fs (loop1): Directory bread(block 65) failed [ 238.449496][ T7131] FAT-fs (loop1): Directory bread(block 66) failed [ 238.466123][ T7131] FAT-fs (loop1): Directory bread(block 67) failed [ 238.476795][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 238.488133][ T7131] FAT-fs (loop1): Directory bread(block 68) failed [ 238.526750][ T7131] FAT-fs (loop1): Directory bread(block 69) failed [ 238.542521][ T7131] FAT-fs (loop1): Directory bread(block 70) failed [ 238.557114][ T7131] FAT-fs (loop1): Directory bread(block 71) failed [ 238.577576][ T7131] FAT-fs (loop1): Directory bread(block 72) failed [ 238.597736][ T7131] FAT-fs (loop1): Directory bread(block 73) failed [ 238.742186][ T11] kworker/u4:1: attempt to access beyond end of device [ 238.742186][ T11] loop1: rw=1, sector=1224, nr_sectors = 404 limit=256 [ 238.903619][ T5135] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 239.099899][ T5135] usb 1-1: Using ep0 maxpacket: 16 [ 239.107252][ T5135] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 239.132150][ T5135] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.157110][ T5135] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.174457][ T5135] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.188367][ T5135] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.206955][ T5135] usb 1-1: Product: syz [ 239.211652][ T5135] usb 1-1: Manufacturer: syz [ 239.216294][ T5135] usb 1-1: SerialNumber: syz [ 239.341499][ T7167] fuse: Bad value for 'fd' [ 239.647556][ T5135] usb 1-1: 0:2 : does not exist [ 239.820006][ T4628] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 239.925062][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.666'. [ 240.011731][ T4628] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.047310][ T4628] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 240.069905][ T4628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.109529][ T4628] usb 3-1: config 0 descriptor?? [ 240.135628][ T4628] pwc: Askey VC010 type 2 USB webcam detected. [ 240.256600][ T5135] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 240.324209][ T5135] usb 1-1: USB disconnect, device number 11 [ 240.398359][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.479722][ T7195] fuse: Bad value for 'fd' [ 240.550323][ T4628] pwc: recv_control_msg error -32 req 02 val 2b00 [ 240.562337][ T4628] pwc: recv_control_msg error -32 req 02 val 2700 [ 240.578182][ T4628] pwc: recv_control_msg error -32 req 02 val 2c00 [ 240.596343][ T4628] pwc: recv_control_msg error -32 req 04 val 1000 [ 240.616481][ T4628] pwc: recv_control_msg error -32 req 04 val 1300 [ 240.624240][ T4628] pwc: recv_control_msg error -32 req 04 val 1400 [ 240.859862][ T4628] pwc: recv_control_msg error -71 req 02 val 2100 [ 240.878809][ T4628] pwc: recv_control_msg error -71 req 04 val 1500 [ 240.894774][ T4628] pwc: recv_control_msg error -71 req 02 val 2500 [ 240.904300][ T4628] pwc: recv_control_msg error -71 req 02 val 2400 [ 240.912016][ T4628] pwc: recv_control_msg error -71 req 02 val 2600 [ 240.918852][ T4628] pwc: recv_control_msg error -71 req 02 val 2900 [ 240.928284][ T4628] pwc: recv_control_msg error -71 req 02 val 2800 [ 240.974998][ T4628] pwc: recv_control_msg error -71 req 04 val 1100 [ 240.988789][ T4628] pwc: recv_control_msg error -71 req 04 val 1200 [ 241.000154][ T4628] pwc: Registered as video103. [ 241.012172][ T4628] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 241.026535][ T7210] loop3: detected capacity change from 0 to 128 [ 241.063550][ T4628] usb 3-1: USB disconnect, device number 6 [ 241.769988][ T4431] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 241.866444][ T7231] fuse: Bad value for 'fd' [ 241.971296][ T4431] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.989464][ T4431] usb 3-1: config 0 has no interfaces? [ 242.004644][ T4431] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 242.016157][ T4431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.028212][ T4431] usb 3-1: config 0 descriptor?? [ 242.239177][ T4431] usb 3-1: string descriptor 0 read error: -71 [ 242.255081][ T4431] usb 3-1: USB disconnect, device number 7 [ 242.383777][ T7236] loop5: detected capacity change from 0 to 1764 [ 242.439382][ T11] team0: Port device team_slave_0 removed [ 242.650039][ T5139] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 242.840199][ T5139] usb 4-1: Using ep0 maxpacket: 16 [ 242.848574][ T5139] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 242.893078][ T5139] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.922148][ T5139] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.957854][ T5139] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.984471][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.006173][ T5139] usb 4-1: Product: syz [ 243.010882][ T5139] usb 4-1: Manufacturer: syz [ 243.015765][ T5139] usb 4-1: SerialNumber: syz [ 243.250336][ T7215] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 243.334960][ T4628] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 243.437095][ T5139] usb 4-1: 0:2 : does not exist [ 243.549032][ T4628] usb 6-1: Using ep0 maxpacket: 16 [ 243.556458][ T4628] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 243.587933][ T4628] usb 6-1: config 0 has no interface number 0 [ 243.626892][ T4628] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 243.659961][ T4628] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.689869][ T4628] usb 6-1: Product: syz [ 243.720104][ T4628] usb 6-1: Manufacturer: syz [ 243.724756][ T4628] usb 6-1: SerialNumber: syz [ 243.752981][ T4628] usb 6-1: config 0 descriptor?? [ 243.772838][ T4628] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 244.074677][ T5139] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 244.170755][ T5139] usb 4-1: USB disconnect, device number 8 [ 244.405268][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.757556][ T7263] loop3: detected capacity change from 0 to 2048 [ 244.783309][ T7263] UDF-fs: bad mount option "18446744073709551615  " or missing value [ 244.890302][ T7263] loop3: detected capacity change from 0 to 2048 [ 244.915040][ T7263] UDF-fs: bad mount option "s" or missing value [ 245.323881][ T5139] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 245.416615][ T4628] gspca_spca1528: reg_r err -71 [ 245.422220][ T4628] spca1528: probe of 6-1:0.1 failed with error -71 [ 245.437772][ T4628] usb 6-1: USB disconnect, device number 4 [ 245.521017][ T5139] usb 4-1: Using ep0 maxpacket: 32 [ 245.545216][ T5139] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 245.556372][ T5139] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.588764][ T5139] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 245.598152][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.606968][ T5139] usb 4-1: Product: syz [ 245.614454][ T5139] usb 4-1: Manufacturer: syz [ 245.619111][ T5139] usb 4-1: SerialNumber: syz [ 245.855833][ T5139] usbhid 4-1:1.0: can't add hid device: -71 [ 245.862204][ T5139] usbhid: probe of 4-1:1.0 failed with error -71 [ 245.880694][ T5139] usb 4-1: USB disconnect, device number 9 [ 246.885073][ T7276] fuse: Invalid rootmode [ 247.273042][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 247.281980][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 247.465237][ T7286] loop3: detected capacity change from 0 to 128 [ 247.515785][ T7286] EXT4-fs (loop3): Test dummy encryption mode enabled [ 247.668280][ T7286] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 247.700397][ T7286] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 247.907856][ T27] audit: type=1326 audit(1746712056.970:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.0.708" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5c598e969 code=0x0 [ 248.657246][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 248.909629][ T7318] fuse: Invalid rootmode [ 248.929946][ T4309] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 249.129927][ T4309] usb 6-1: Using ep0 maxpacket: 32 [ 249.137163][ T4309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.166619][ T4309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.206056][ T4309] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 249.243061][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'. [ 249.259842][ T4309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.268167][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'. [ 249.299548][ T4309] usb 6-1: config 0 descriptor?? [ 249.321783][ T4309] hub 6-1:0.0: USB hub found [ 249.366664][ T7333] loop2: detected capacity change from 0 to 256 [ 249.525900][ T4309] hub 6-1:0.0: 1 port detected [ 249.552746][ T5139] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 249.852387][ T5139] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 249.878725][ T5139] usb 4-1: New USB device found, idVendor=0b57, idProduct=d863, bcdDevice=2e.bb [ 249.899887][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.942688][ T5139] usb 4-1: config 0 descriptor?? [ 250.104224][ T7347] loop1: detected capacity change from 0 to 256 [ 250.226941][ T4309] hub 6-1:0.0: activate --> -90 [ 250.338083][ T7354] fuse: Bad value for 'rootmode' [ 250.427750][ T4309] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 250.428021][ T127] usb 6-1: USB disconnect, device number 5 [ 250.632806][ T7358] loop1: detected capacity change from 0 to 64 [ 250.729988][ T4309] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 251.041927][ T4309] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.059800][ T4309] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.099351][ T4309] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 251.169948][ T4259] Bluetooth: hci5: command 0x1003 tx timeout [ 251.169984][ T4257] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 251.196475][ T4309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.243254][ T127] usb 4-1: USB disconnect, device number 10 [ 251.296135][ T4309] usb 3-1: config 0 descriptor?? [ 251.543431][ T4628] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 251.552208][ T4429] usb 3-1: USB disconnect, device number 8 [ 251.750050][ T4628] usb 6-1: Using ep0 maxpacket: 32 [ 251.759110][ T4628] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 251.770799][ T7369] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 251.774746][ T4628] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.799594][ T4628] usb 6-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 251.808995][ T4628] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.817444][ T4628] usb 6-1: Product: syz [ 251.821939][ T4628] usb 6-1: Manufacturer: syz [ 251.826434][ T7369] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 251.826652][ T4628] usb 6-1: SerialNumber: syz [ 251.900606][ T5135] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 252.076177][ T4628] usbhid 6-1:1.0: can't add hid device: -71 [ 252.082590][ T4628] usbhid: probe of 6-1:1.0 failed with error -71 [ 252.090203][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 252.101443][ T4628] usb 6-1: USB disconnect, device number 6 [ 252.101440][ T5135] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 252.101467][ T5135] usb 2-1: config 179 has no interface number 0 [ 252.132394][ T5135] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 252.147047][ T5135] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 252.168359][ T5135] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 20, changing to 8 [ 252.212592][ T5135] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 57696, setting to 1024 [ 252.229473][ T5135] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 252.248458][ T5135] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 252.258547][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.284313][ T7367] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 252.309887][ T4629] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 252.499747][ T7388] loop0: detected capacity change from 0 to 512 [ 252.511240][ T4629] usb 4-1: Using ep0 maxpacket: 16 [ 252.520506][ T4629] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 252.532242][ T4629] usb 4-1: config 0 has no interface number 0 [ 252.550718][ T4629] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 252.560665][ T4629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.576489][ T4629] usb 4-1: Product: syz [ 252.597406][ T7388] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 252.626345][ T4629] usb 4-1: Manufacturer: syz [ 252.645025][ T7388] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.648694][ T4629] usb 4-1: SerialNumber: syz [ 252.661797][ T7395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.691145][ T7395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.731691][ T4629] usb 4-1: config 0 descriptor?? [ 252.751450][ T4629] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 252.850932][ T4254] EXT4-fs (loop0): unmounting filesystem. [ 253.227252][ T7407] loop2: detected capacity change from 0 to 256 [ 253.343367][ T7407] FAT-fs (loop2): Directory bread(block 64) failed [ 253.351019][ T7407] FAT-fs (loop2): Directory bread(block 65) failed [ 253.358678][ T7407] FAT-fs (loop2): Directory bread(block 66) failed [ 253.369094][ T7407] FAT-fs (loop2): Directory bread(block 67) failed [ 253.395946][ T7407] FAT-fs (loop2): Directory bread(block 68) failed [ 253.408870][ T7407] FAT-fs (loop2): Directory bread(block 69) failed [ 253.417919][ T7407] FAT-fs (loop2): Directory bread(block 70) failed [ 253.454676][ T7407] FAT-fs (loop2): Directory bread(block 71) failed [ 253.461649][ T7407] FAT-fs (loop2): Directory bread(block 72) failed [ 253.490317][ T7407] FAT-fs (loop2): Directory bread(block 73) failed [ 253.747194][ T5459] kworker/u4:9: attempt to access beyond end of device [ 253.747194][ T5459] loop2: rw=1, sector=1224, nr_sectors = 404 limit=256 [ 254.425987][ T4629] gspca_spca1528: reg_r err -71 [ 254.439491][ T4629] spca1528: probe of 4-1:0.1 failed with error -71 [ 254.484819][ T4629] usb 4-1: USB disconnect, device number 11 [ 254.609571][ T7414] loop2: detected capacity change from 0 to 8192 [ 254.660628][ T7414] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 254.875979][ T5135] usb 2-1: USB disconnect, device number 17 [ 254.876039][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 254.876083][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 255.495608][ T5139] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 255.521906][ T7433] fuse: Bad value for 'rootmode' [ 255.706303][ T7437] loop0: detected capacity change from 0 to 256 [ 255.714715][ T5139] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.728902][ T5139] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 255.740796][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.740882][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.761528][ T5139] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 255.770915][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.781478][ T5139] usb 3-1: config 0 descriptor?? [ 255.926844][ T7437] FAT-fs (loop0): Directory bread(block 64) failed [ 255.946101][ T7437] FAT-fs (loop0): Directory bread(block 65) failed [ 255.952911][ T7437] FAT-fs (loop0): Directory bread(block 66) failed [ 255.965198][ T7437] FAT-fs (loop0): Directory bread(block 67) failed [ 255.985721][ T7437] FAT-fs (loop0): Directory bread(block 68) failed [ 255.992527][ T7437] FAT-fs (loop0): Directory bread(block 69) failed [ 255.994972][ T4429] usb 3-1: USB disconnect, device number 9 [ 255.999256][ T7437] FAT-fs (loop0): Directory bread(block 70) failed [ 256.077777][ T7437] FAT-fs (loop0): Directory bread(block 71) failed [ 256.098100][ T7437] FAT-fs (loop0): Directory bread(block 72) failed [ 256.118278][ T7437] FAT-fs (loop0): Directory bread(block 73) failed [ 256.166993][ T7447] loop3: detected capacity change from 0 to 4096 [ 256.213803][ T7447] ntfs3: Unknown parameter 'nocase' [ 256.318438][ T4269] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 256.824583][ T7467] netlink: 132 bytes leftover after parsing attributes in process `syz.3.758'. [ 256.904814][ T7474] fuse: Unknown parameter 'use00000000000000000000' [ 257.714578][ T127] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 257.892049][ T7499] loop0: detected capacity change from 0 to 2048 [ 257.909862][ T127] usb 4-1: Using ep0 maxpacket: 16 [ 257.916846][ T127] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 257.938934][ T7499] UDF-fs: bad mount option "00000000000000000003  " or missing value [ 258.006936][ T127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.037675][ T127] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.087456][ T127] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.096719][ T7499] loop0: detected capacity change from 0 to 2048 [ 258.097513][ T7499] UDF-fs: bad mount option "s" or missing value [ 258.163881][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.196824][ T127] usb 4-1: Product: syz [ 258.214625][ T127] usb 4-1: Manufacturer: syz [ 258.238050][ T127] usb 4-1: SerialNumber: syz [ 258.436219][ T7512] fuse: Unknown parameter 'use00000000000000000000' [ 258.885624][ T127] usb 4-1: 0:2 : does not exist [ 258.911699][ T127] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 258.978046][ T127] usb 4-1: USB disconnect, device number 12 [ 259.031965][ T7530] loop1: detected capacity change from 0 to 8 [ 259.227199][ T7530] SQUASHFS error: Failed to read block 0x2fc: -5 [ 259.236065][ T7530] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 259.244512][ T7530] SQUASHFS error: Unable to read directory block [247:26] [ 259.330712][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.737005][ T7548] fuse: Unknown parameter 'use00000000000000000000' [ 259.845948][ T7547] loop3: detected capacity change from 0 to 2048 [ 259.900960][ T7547] UDF-fs: bad mount option "18446744073709551615  " or missing value [ 260.021087][ T7547] loop3: detected capacity change from 0 to 2048 [ 260.082719][ T7547] UDF-fs: bad mount option "s" or missing value [ 260.599928][ T127] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 260.801810][ T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.830103][ T127] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 260.876000][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.906362][ T127] usb 4-1: config 0 descriptor?? [ 260.926077][ T127] pwc: Askey VC010 type 2 USB webcam detected. [ 261.279936][ T4429] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 261.450730][ T127] pwc: recv_control_msg error -32 req 02 val 2b00 [ 261.464849][ T127] pwc: recv_control_msg error -32 req 02 val 2700 [ 261.469899][ T4429] usb 2-1: Using ep0 maxpacket: 16 [ 261.485049][ T127] pwc: recv_control_msg error -32 req 02 val 2c00 [ 261.485049][ T4429] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 261.485074][ T4429] usb 2-1: config 0 has no interface number 0 [ 261.493317][ T7581] loop5: detected capacity change from 0 to 2048 [ 261.502304][ T4429] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 261.521686][ T4429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.529932][ T4429] usb 2-1: Product: syz [ 261.534275][ T4429] usb 2-1: Manufacturer: syz [ 261.537227][ T127] pwc: recv_control_msg error -32 req 04 val 1000 [ 261.538982][ T4429] usb 2-1: SerialNumber: syz [ 261.549312][ T7581] UDF-fs: bad mount option "18446744073709551615  " or missing value [ 261.565930][ T4429] usb 2-1: config 0 descriptor?? [ 261.575102][ T4429] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 261.588133][ T127] pwc: recv_control_msg error -32 req 04 val 1300 [ 261.591488][ T5135] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 261.712728][ T7581] loop5: detected capacity change from 0 to 2048 [ 261.740752][ T7581] UDF-fs: bad mount option "s" or missing value [ 261.782584][ T5135] usb 3-1: config 0 has no interfaces? [ 261.794930][ T5135] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 261.804740][ T5135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.813249][ T5135] usb 3-1: Product: syz [ 261.817764][ T5135] usb 3-1: Manufacturer: syz [ 261.823106][ T5135] usb 3-1: SerialNumber: syz [ 261.825752][ T127] pwc: recv_control_msg error -71 req 02 val 2000 [ 261.847358][ T127] pwc: recv_control_msg error -71 req 02 val 2100 [ 261.850778][ T5135] usb 3-1: config 0 descriptor?? [ 261.909275][ T127] pwc: recv_control_msg error -71 req 04 val 1500 [ 261.952382][ T127] pwc: recv_control_msg error -71 req 02 val 2500 [ 261.978086][ T127] pwc: recv_control_msg error -71 req 02 val 2400 [ 262.003569][ T127] pwc: recv_control_msg error -71 req 02 val 2600 [ 262.025764][ T127] pwc: recv_control_msg error -71 req 02 val 2900 [ 262.044284][ T127] pwc: recv_control_msg error -71 req 02 val 2800 [ 262.067940][ T127] pwc: recv_control_msg error -71 req 04 val 1100 [ 262.090647][ T127] pwc: recv_control_msg error -71 req 04 val 1200 [ 262.139183][ T127] pwc: Registered as video103. [ 262.152844][ T7578] device vlan3 entered promiscuous mode [ 262.166482][ T127] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 262.184083][ T7578] device vlan2 entered promiscuous mode [ 262.204503][ T7578] device syz_tun entered promiscuous mode [ 262.247387][ T127] usb 4-1: USB disconnect, device number 13 [ 262.375697][ T5135] usb 3-1: USB disconnect, device number 10 [ 263.207464][ T4429] gspca_spca1528: reg_r err -71 [ 263.219082][ T4429] spca1528: probe of 2-1:0.1 failed with error -71 [ 263.225547][ T4629] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 263.248078][ T4429] usb 2-1: USB disconnect, device number 18 [ 263.431390][ T4629] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 263.452249][ T4629] usb 4-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 263.477585][ T7611] loop2: detected capacity change from 0 to 2048 [ 263.486317][ T7611] UDF-fs: bad mount option "18446744073709551615  " or missing value [ 263.511341][ T4629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.583513][ T4629] usb 4-1: config 0 descriptor?? [ 263.629256][ T7616] syz.2.818 uses obsolete (PF_INET,SOCK_PACKET) [ 263.816964][ T4629] usb 4-1: USB disconnect, device number 14 [ 263.989929][ T4429] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 264.199924][ T4429] usb 6-1: Using ep0 maxpacket: 32 [ 264.209518][ T4429] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 264.255669][ T4429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.281079][ T4429] usb 6-1: Product: syz [ 264.285321][ T4429] usb 6-1: Manufacturer: syz [ 264.319246][ T4429] usb 6-1: SerialNumber: syz [ 264.369334][ T4429] usb 6-1: config 0 descriptor?? [ 264.422268][ T4429] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 264.994815][ T7640] loop0: detected capacity change from 0 to 8 [ 265.068548][ T7640] SQUASHFS error: xz decompression failed, data probably corrupt [ 265.087424][ T7640] SQUASHFS error: Failed to read block 0x108: -5 [ 265.118543][ T7640] SQUASHFS error: Unable to read metadata cache entry [106] [ 265.145468][ T7640] SQUASHFS error: Unable to read inode 0x11f [ 265.562869][ T7648] netlink: 'syz.3.831': attribute type 10 has an invalid length. [ 265.590398][ T7648] netlink: 40 bytes leftover after parsing attributes in process `syz.3.831'. [ 265.623505][ T7648] device batadv0 entered promiscuous mode [ 265.628536][ T4429] gspca_ov534_9: reg_w failed -71 [ 265.666072][ T7648] bridge0: port 3(batadv0) entered blocking state [ 265.694686][ T7648] bridge0: port 3(batadv0) entered disabled state [ 265.769047][ T7648] bridge0: port 3(batadv0) entered blocking state [ 265.776256][ T7648] bridge0: port 3(batadv0) entered forwarding state [ 265.781573][ T7658] loop0: detected capacity change from 0 to 64 [ 265.807501][ T7649] batman_adv: batadv0: Adding interface: dummy0 [ 265.814640][ T7649] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.027263][ T7649] batman_adv: batadv0: Interface activated: dummy0 [ 266.050022][ T4429] gspca_ov534_9: Unknown sensor 0000 [ 266.050094][ T4429] ov534_9: probe of 6-1:0.0 failed with error -22 [ 266.068577][ T7656] batadv0: mtu less than device minimum [ 266.090295][ T4429] usb 6-1: USB disconnect, device number 7 [ 266.111271][ T7656] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.112785][ T7656] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.114041][ T7656] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.115333][ T7656] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.116611][ T7656] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.117823][ T7656] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.119036][ T7656] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.120615][ T7656] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.122590][ T7656] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.206489][ T57] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 266.206609][ T57] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 266.467650][ T7664] Invalid ELF header magic: != ELF [ 266.915184][ T7683] loop5: detected capacity change from 0 to 8 [ 266.986565][ T7683] SQUASHFS error: xz decompression failed, data probably corrupt [ 267.001650][ T7683] SQUASHFS error: Failed to read block 0x108: -5 [ 267.152389][ T7683] SQUASHFS error: Unable to read metadata cache entry [106] [ 267.192894][ T7683] SQUASHFS error: Unable to read inode 0x11f [ 267.436855][ T7691] loop0: detected capacity change from 0 to 64 [ 267.624198][ T7696] fuse: Unknown parameter 'user_id00000000000000000000' [ 267.977386][ T7705] loop0: detected capacity change from 0 to 256 [ 268.097124][ T7705] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 268.109980][ T4309] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 268.161452][ T4429] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 268.309905][ T4309] usb 6-1: Using ep0 maxpacket: 16 [ 268.318297][ T4309] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 268.327602][ T4309] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.340710][ T4309] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.352838][ T4309] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.362739][ T4309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.371073][ T4429] usb 4-1: Using ep0 maxpacket: 8 [ 268.378432][ T4309] usb 6-1: Product: syz [ 268.383647][ T4309] usb 6-1: Manufacturer: syz [ 268.389622][ T4429] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 268.398724][ T4309] usb 6-1: SerialNumber: syz [ 268.404718][ T4429] usb 4-1: config 179 has no interface number 0 [ 268.414170][ T4429] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 268.429262][ T4429] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 268.442042][ T4429] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 20, changing to 8 [ 268.454506][ T4429] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 57696, setting to 1024 [ 268.467167][ T4429] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 268.482268][ T4429] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 268.492457][ T4429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.504862][ T7703] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 268.910833][ T7724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.931928][ T7724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.985884][ T7726] loop0: detected capacity change from 0 to 8 [ 269.043818][ T4309] usb 6-1: 0:2 : does not exist [ 269.059582][ T4309] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 269.110141][ T4309] usb 6-1: USB disconnect, device number 8 [ 269.197518][ T7726] SQUASHFS error: xz decompression failed, data probably corrupt [ 269.237420][ T7726] SQUASHFS error: Failed to read block 0x108: -5 [ 269.267891][ T7726] SQUASHFS error: Unable to read metadata cache entry [106] [ 269.307512][ T7726] SQUASHFS error: Unable to read inode 0x11f [ 269.390979][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.755343][ T7738] loop5: detected capacity change from 0 to 64 [ 269.766128][ T7736] fuse: Unknown parameter 'user_id00000000000000000000' [ 271.058835][ T4429] usb 4-1: USB disconnect, device number 15 [ 271.065075][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 271.073419][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 271.190011][ T4309] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 271.245740][ T7761] loop3: detected capacity change from 0 to 8 [ 271.383882][ T4309] usb 2-1: Using ep0 maxpacket: 16 [ 271.392058][ T4309] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 271.429315][ T4309] usb 2-1: config 0 has no interface number 0 [ 271.439983][ T4629] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 271.455324][ T4309] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 271.512143][ T4309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.539611][ T4309] usb 2-1: Product: syz [ 271.558416][ T7768] loop3: detected capacity change from 0 to 64 [ 271.560744][ T4309] usb 2-1: Manufacturer: syz [ 271.579736][ T4309] usb 2-1: SerialNumber: syz [ 271.606261][ T4309] usb 2-1: config 0 descriptor?? [ 271.631915][ T4309] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 271.649848][ T4629] usb 1-1: Using ep0 maxpacket: 32 [ 271.667770][ T4629] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 271.694453][ T4629] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.758420][ T4629] usb 1-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 271.775355][ T4629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.784299][ T4629] usb 1-1: Product: syz [ 271.789155][ T4629] usb 1-1: Manufacturer: syz [ 271.802268][ T4629] usb 1-1: SerialNumber: syz [ 272.053645][ T4629] usbhid 1-1:1.0: can't add hid device: -71 [ 272.059730][ T4629] usbhid: probe of 1-1:1.0 failed with error -71 [ 272.101022][ T4629] usb 1-1: USB disconnect, device number 12 [ 273.328985][ T4309] gspca_spca1528: reg_r err -71 [ 273.334910][ T4309] spca1528: probe of 2-1:0.1 failed with error -71 [ 273.345329][ T4309] usb 2-1: USB disconnect, device number 19 [ 273.551940][ T7796] loop5: detected capacity change from 0 to 8 [ 273.808540][ T7805] fuse: Bad value for 'fd' [ 274.003271][ T7807] loop1: detected capacity change from 0 to 2048 [ 274.042197][ T7807] UDF-fs: bad mount option "00000000000000000003  " or missing value [ 274.290808][ T7807] loop1: detected capacity change from 0 to 2048 [ 274.315900][ T7807] UDF-fs: bad mount option "s" or missing value [ 274.549847][ T4309] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 274.730051][ T5139] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 274.772635][ T4309] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.788765][ T4309] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 274.812940][ T4309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.833181][ T4309] usb 3-1: config 0 descriptor?? [ 274.845293][ T4309] pwc: Askey VC010 type 2 USB webcam detected. [ 274.932090][ T5139] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 274.947288][ T5139] usb 6-1: New USB device found, idVendor=0b57, idProduct=d863, bcdDevice=2e.bb [ 274.957415][ T5139] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.995645][ T5139] usb 6-1: config 0 descriptor?? [ 275.208057][ T5139] usb 6-1: USB disconnect, device number 9 [ 275.246264][ T4309] pwc: recv_control_msg error -32 req 02 val 2b00 [ 275.255998][ T4309] pwc: recv_control_msg error -32 req 02 val 2700 [ 275.273159][ T4309] pwc: recv_control_msg error -32 req 02 val 2c00 [ 275.291236][ T4309] pwc: recv_control_msg error -32 req 04 val 1000 [ 275.309351][ T4309] pwc: recv_control_msg error -32 req 04 val 1300 [ 275.530834][ T4309] pwc: recv_control_msg error -71 req 02 val 2000 [ 275.544867][ T4309] pwc: recv_control_msg error -71 req 02 val 2100 [ 275.572600][ T4309] pwc: recv_control_msg error -71 req 04 val 1500 [ 275.600444][ T4309] pwc: recv_control_msg error -71 req 02 val 2500 [ 275.620473][ T4309] pwc: recv_control_msg error -71 req 02 val 2400 [ 275.669242][ T4309] pwc: recv_control_msg error -71 req 02 val 2600 [ 275.687333][ T4309] pwc: recv_control_msg error -71 req 02 val 2900 [ 275.714493][ T4309] pwc: recv_control_msg error -71 req 02 val 2800 [ 275.745348][ T4309] pwc: recv_control_msg error -71 req 04 val 1100 [ 275.765323][ T4309] pwc: recv_control_msg error -71 req 04 val 1200 [ 275.830043][ T4309] pwc: Registered as video103. [ 275.845426][ T4309] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 275.902073][ T4309] usb 3-1: USB disconnect, device number 11 [ 275.925276][ T7831] loop5: detected capacity change from 0 to 8 [ 276.075441][ T6578] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 276.343034][ T7836] loop8: detected capacity change from 0 to 8 [ 276.367223][ T7836] Dev loop8: unable to read RDB block 8 [ 276.385355][ T7836] loop8: unable to read partition table [ 276.396204][ T7836] loop8: partition table beyond EOD, truncated [ 276.414708][ T7836] loop_reread_partitions: partition scan of loop8 (■швлx№^>рЦ Б) failed (rc=-5) [ 276.532343][ T7840] fuse: Bad value for 'fd' [ 276.611039][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.897'. [ 276.863727][ T7851] loop1: detected capacity change from 0 to 2048 [ 276.962528][ T7851] UDF-fs: bad mount option "00000000000000000003  " or missing value [ 277.153872][ T7851] loop1: detected capacity change from 0 to 2048 [ 277.200679][ T7851] UDF-fs: bad mount option "s" or missing value [ 277.692844][ T7867] loop5: detected capacity change from 0 to 8 [ 278.599078][ T7879] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 278.689415][ T7888] fuse: Unknown parameter '0x0000000000000003' [ 278.791126][ T7879] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 278.807371][ T7879] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 278.825563][ T7879] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 278.849503][ T7879] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 279.561746][ T7901] loop0: detected capacity change from 0 to 2048 [ 279.591093][ T7901] UDF-fs: bad mount option "00000000000000000003  " or missing value [ 279.655927][ T7901] loop0: detected capacity change from 0 to 2048 [ 279.667538][ T7901] UDF-fs: bad mount option "s" or missing value [ 279.723879][ T4269] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 280.351978][ T7918] fuse: Unknown parameter '0x0000000000000003' [ 280.565091][ T27] audit: type=1800 audit(1746712089.630:53): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.924" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 280.888924][ T7927] loop3: detected capacity change from 0 to 2048 [ 280.941166][ T7927] UDF-fs: bad mount option "00000000000000000003  " or missing value [ 281.136779][ T7927] loop3: detected capacity change from 0 to 2048 [ 281.209446][ T7927] UDF-fs: bad mount option "s" or missing value [ 281.426044][ T7939] loop0: detected capacity change from 0 to 64 [ 282.034595][ T7955] fuse: Unknown parameter '0x0000000000000003' [ 282.037066][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.936'. [ 282.068132][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.5.936'. [ 282.346359][ T7964] loop0: detected capacity change from 0 to 1024 [ 282.353947][ T7964] hfsplus: part requires an argument [ 282.360375][ T7964] hfsplus: unable to parse mount options [ 282.549925][ T127] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 282.736903][ T7969] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 282.749896][ T127] usb 6-1: Using ep0 maxpacket: 16 [ 282.757392][ T127] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.795640][ T127] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.820638][ T127] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 282.838429][ T127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.886670][ T127] usb 6-1: config 0 descriptor?? [ 282.907109][ T7969] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 282.953354][ T7969] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 283.075854][ T7976] loop3: detected capacity change from 0 to 128 [ 283.317525][ T127] samsung 0003:0419:0001.0001: item fetching failed at offset 4/5 [ 283.349166][ T127] samsung 0003:0419:0001.0001: parse failed [ 283.513541][ T127] samsung: probe of 0003:0419:0001.0001 failed with error -22 [ 283.570641][ T127] usb 6-1: USB disconnect, device number 10 [ 283.665650][ T7990] loop3: detected capacity change from 0 to 64 [ 284.400078][ T4309] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 284.592154][ T4309] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 284.606212][ T4309] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 284.626683][ T4309] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72 [ 284.652838][ T4309] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 284.662813][ T4309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.671512][ T4309] usb 6-1: Product: syz [ 284.676127][ T4309] usb 6-1: Manufacturer: syz [ 284.681306][ T4309] usb 6-1: SerialNumber: syz [ 284.690854][ T8002] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 284.945349][ T4309] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 285.122564][ T4309] usb 6-1: USB disconnect, device number 11 [ 285.160579][ T4309] usblp0: removed [ 285.801973][ T8030] loop2: detected capacity change from 0 to 64 [ 286.199500][ T8039] autofs4:pid:8039:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 286.285085][ T8039] autofs4:pid:8039:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 286.489898][ T4302] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 286.740204][ T4302] usb 6-1: device descriptor read/64, error -71 [ 287.010452][ T4302] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 287.169907][ T4302] usb 6-1: device descriptor read/64, error -71 [ 287.300332][ T4302] usb usb6-port1: attempt power cycle [ 287.421644][ T8057] loop1: detected capacity change from 0 to 8 [ 287.729945][ T4302] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 287.780582][ T4302] usb 6-1: device descriptor read/8, error -71 [ 288.079953][ T4302] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 288.126401][ T4302] usb 6-1: device descriptor read/8, error -71 [ 288.159361][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 288.270070][ T4302] usb usb6-port1: unable to enumerate USB device [ 288.861364][ T4628] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 289.070023][ T4628] usb 1-1: Using ep0 maxpacket: 32 [ 289.080931][ T4628] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 289.098525][ T4628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.115531][ T4628] usb 1-1: Product: syz [ 289.141733][ T4628] usb 1-1: Manufacturer: syz [ 289.165232][ T4628] usb 1-1: SerialNumber: syz [ 289.201104][ T4628] usb 1-1: config 0 descriptor?? [ 289.249357][ T8086] loop5: detected capacity change from 0 to 8 [ 289.305219][ T4269] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 289.829874][ T5135] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 289.842929][ T4628] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 289.899974][ T4629] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 289.920721][ T4628] peak_usb: probe of 1-1:0.0 failed with error -71 [ 289.948182][ T4628] usb 1-1: USB disconnect, device number 13 [ 290.026976][ T5135] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 290.037248][ T5135] usb 6-1: New USB device found, idVendor=0b57, idProduct=d863, bcdDevice=2e.bb [ 290.054461][ T5135] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.076971][ T5135] usb 6-1: config 0 descriptor?? [ 290.103616][ T4629] usb 4-1: Using ep0 maxpacket: 32 [ 290.114374][ T4629] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 290.134137][ T4629] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.163272][ T4629] usb 4-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 290.179354][ T4629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.197184][ T4629] usb 4-1: Product: syz [ 290.206288][ T4629] usb 4-1: Manufacturer: syz [ 290.212030][ T4257] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 290.234639][ T4629] usb 4-1: SerialNumber: syz [ 290.289135][ T5139] usb 6-1: USB disconnect, device number 16 [ 290.479108][ T4629] usbhid 4-1:1.0: can't add hid device: -71 [ 290.489430][ T4629] usbhid: probe of 4-1:1.0 failed with error -71 [ 290.527719][ T4629] usb 4-1: USB disconnect, device number 16 [ 291.240512][ T4628] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 291.432377][ T4628] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.445179][ T4628] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 291.456477][ T4628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.467944][ T8114] [ 291.470974][ T8114] ============================= [ 291.475883][ T8114] WARNING: suspicious RCU usage [ 291.481185][ T8114] 6.1.137-syzkaller #0 Not tainted [ 291.486519][ T8114] ----------------------------- [ 291.491431][ T8114] net/mac80211/sta_info.c:361 suspicious rcu_dereference_protected() usage! [ 291.500140][ T8114] [ 291.500140][ T8114] other info that might help us debug this: [ 291.500140][ T8114] [ 291.510407][ T8114] [ 291.510407][ T8114] rcu_scheduler_active = 2, debug_locks = 1 [ 291.518511][ T8114] 3 locks held by syz.1.998/8114: [ 291.523572][ T8114] #0: ffffffff8db93cb0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 291.531831][ T8114] #1: ffff8880555507c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_pre_doit+0x27d/0x930 [ 291.541727][ T8114] #2: ffff8880755e0d40 (&wdev->mtx){+.+.}-{3:3}, at: nl80211_new_station+0x150b/0x1a00 [ 291.551526][ T8114] [ 291.551526][ T8114] stack backtrace: [ 291.557456][ T8114] CPU: 0 PID: 8114 Comm: syz.1.998 Not tainted 6.1.137-syzkaller #0 [ 291.565567][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 291.575651][ T8114] Call Trace: [ 291.578948][ T8114] [ 291.581980][ T8114] dump_stack_lvl+0x168/0x22e [ 291.586689][ T8114] ? show_regs_print_info+0x12/0x12 [ 291.591894][ T8114] ? load_image+0x3b0/0x3b0 [ 291.596423][ T8114] lockdep_rcu_suspicious+0x1dd/0x300 [ 291.601828][ T8114] sta_remove_link+0x356/0x4b0 [ 291.606612][ T8114] sta_info_free+0x50/0x670 [ 291.611142][ T8114] ? ieee80211_add_station+0x3ae/0x5d0 [ 291.616689][ T8114] ieee80211_add_station+0x3b9/0x5d0 [ 291.621992][ T8114] rdev_add_station+0x10c/0x2d0 [ 291.626848][ T8114] ? mutex_unlock+0x10/0x10 [ 291.631362][ T8114] nl80211_new_station+0x15ef/0x1a00 [ 291.636669][ T8114] ? nl80211_set_station+0x1700/0x1700 [ 291.642153][ T8114] ? netdev_run_todo+0xd1e/0xd80 [ 291.647132][ T8114] ? nl80211_pre_doit+0x4ed/0x930 [ 291.652192][ T8114] genl_family_rcv_msg_doit+0x22e/0x320 [ 291.657738][ T8114] ? end_current_label_crit_section+0x170/0x170 [ 291.663988][ T8114] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 291.669891][ T8114] ? bpf_lsm_capable+0x5/0x10 [ 291.674571][ T8114] ? security_capable+0x85/0xb0 [ 291.679421][ T8114] genl_rcv_msg+0x5f2/0x780 [ 291.683931][ T8114] ? genl_bind+0x350/0x350 [ 291.688352][ T8114] ? nl80211_set_station+0x1700/0x1700 [ 291.693830][ T8114] netlink_rcv_skb+0x1de/0x420 [ 291.698602][ T8114] ? genl_bind+0x350/0x350 [ 291.703021][ T8114] ? netlink_ack+0x1100/0x1100 [ 291.707801][ T8114] ? down_read+0x1a8/0x2d0 [ 291.712222][ T8114] genl_rcv+0x24/0x40 [ 291.716211][ T8114] netlink_unicast+0x74c/0x8c0 [ 291.720990][ T8114] netlink_sendmsg+0x89e/0xbc0 [ 291.725788][ T8114] ? netlink_getsockopt+0x540/0x540 [ 291.730999][ T8114] ? aa_sock_msg_perm+0x94/0x150 [ 291.735953][ T8114] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 291.741260][ T8114] ? security_socket_sendmsg+0x7c/0xa0 [ 291.746733][ T8114] ? netlink_getsockopt+0x540/0x540 [ 291.751951][ T8114] ____sys_sendmsg+0x59b/0x970 [ 291.756735][ T8114] ? __sys_sendmsg_sock+0x30/0x30 [ 291.761773][ T8114] ? __import_iovec+0x315/0x500 [ 291.766646][ T8114] ? import_iovec+0x6f/0xa0 [ 291.771165][ T8114] ___sys_sendmsg+0x21c/0x290 [ 291.775858][ T8114] ? __sys_sendmsg+0x270/0x270 [ 291.780907][ T8114] ? put_user_ifreq+0x81/0xb0 [ 291.785612][ T8114] ? __fdget+0x17c/0x200 [ 291.789866][ T8114] __se_sys_sendmsg+0x19e/0x270 [ 291.794729][ T8114] ? __se_sys_futex+0x14a/0x440 [ 291.799598][ T8114] ? __x64_sys_sendmsg+0x80/0x80 [ 291.804557][ T8114] ? lockdep_hardirqs_on+0x94/0x140 [ 291.809780][ T8114] do_syscall_64+0x4c/0xa0 [ 291.814222][ T8114] ? clear_bhb_loop+0x45/0xa0 [ 291.818898][ T8114] ? clear_bhb_loop+0x45/0xa0 [ 291.823578][ T8114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.829506][ T8114] RIP: 0033:0x7fadb4b8e969 [ 291.833933][ T8114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.853547][ T8114] RSP: 002b:00007fadb5956038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.861961][ T8114] RAX: ffffffffffffffda RBX: 00007fadb4db5fa0 RCX: 00007fadb4b8e969 [ 291.869931][ T8114] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 291.877992][ T8114] RBP: 00007fadb4c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 291.885975][ T8114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.893965][ T8114] R13: 0000000000000000 R14: 00007fadb4db5fa0 R15: 00007ffdf19a0b58 [ 291.901954][ T8114] [ 291.913940][ T4628] usb 1-1: config 0 descriptor?? [ 291.923732][ T4628] pwc: Askey VC010 type 2 USB webcam detected. [ 292.338777][ T4628] pwc: recv_control_msg error -32 req 02 val 2b00 [ 292.346048][ T4628] pwc: recv_control_msg error -32 req 02 val 2700 [ 292.355998][ T4628] pwc: recv_control_msg error -32 req 02 val 2c00 [ 292.363659][ T4628] pwc: recv_control_msg error -32 req 04 val 1000 [ 292.371323][ T4628] pwc: recv_control_msg error -32 req 04 val 1300 [ 292.580171][ T4628] pwc: recv_control_msg error -71 req 02 val 2000 [ 292.590811][ T4628] pwc: recv_control_msg error -71 req 02 val 2100 [ 292.613298][ T4628] pwc: recv_control_msg error -71 req 04 val 1500 [ 292.622632][ T4628] pwc: recv_control_msg error -71 req 02 val 2500 [ 292.629506][ T4628] pwc: recv_control_msg error -71 req 02 val 2400 [ 292.638187][ T4628] pwc: recv_control_msg error -71 req 02 val 2600 [ 292.645125][ T4628] pwc: recv_control_msg error -71 req 02 val 2900 [ 292.652166][ T4628] pwc: recv_control_msg error -71 req 02 val 2800 [ 292.659172][ T4628] pwc: recv_control_msg error -71 req 04 val 1100 [ 292.666065][ T4628] pwc: recv_control_msg error -71 req 04 val 1200 [ 292.673602][ T4628] pwc: Registered as video103. [ 292.679297][ T4628] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 292.696458][ T4628] usb 1-1: USB disconnect, device number 14 [ 293.170020][ T8108] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 298.779947][ T4257] Bluetooth: hci4: command 0x0406 tx timeout